amazon-pricing-command-center
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions are focused on data analysis and pricing strategy. While the skill processes external data like Amazon product reviews, it includes mandatory disclaimers and requires the use of confidence labels (e.g., Data-backed vs Inferred), which helps maintain the integrity of the agent's output against potential indirect prompt injection from untrusted review content.
- [CREDENTIALS_UNSAFE]: The skill manages the
ZOODATA_API_KEYthrough environment variables or local user configuration files (e.g.,~/.zoodata/config.json). This implementation aligns with standard security best practices for handling service credentials in developer tools and CLI applications. - [EXTERNAL_DOWNLOADS]: Network operations are restricted to the official ZooData API infrastructure (
api.zoodata.ai). These connections are necessary for the skill's documented purpose of retrieving real-time Amazon market data and are consistent with the vendor's provided services. - [COMMAND_EXECUTION]: The skill executes the bundled
zoodata.pyscript to perform API requests. This script is built using only the Python standard library, which eliminates risks associated with third-party package dependencies, and it performs strictly defined data retrieval tasks without exposing the system to arbitrary command injection.
Audit Metadata