amazon-opportunity-discoverer
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a dedicated Python script (
zoodata.py) to interface with the vendor's API. This script is well-written, uses standard libraries, and does not contain any hardcoded credentials or malicious logic. It correctly handles API authentication via environment variables or a local JSON configuration file. - [SAFE]: All network activity is directed to the official API endpoint (
api.zoodata.ai), which is consistent with the skill's documented purpose as a data discovery tool. There is no evidence of unauthorized data exfiltration to third-party domains. - [SAFE]: The skill processes external data (Amazon product info and reviews) using structured prompt templates. These templates include markers and clear instructions for the AI to handle the data safely, mitigating the risk of indirect prompt injection. No privilege escalation, persistence mechanisms, or dynamic execution vulnerabilities were identified.
Audit Metadata