amazon-product-search-api-skill
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
amazon_product_search_api.pyto interact with the BrowserAct API. This is the intended primary purpose of the skill and is performed using standard subprocess calls. - [EXTERNAL_DOWNLOADS]: The skill communicates with
api.browseract.comto initiate and monitor web scraping tasks. This domain belongs to the skill's author (browser-act) and is used for its documented functionality. - [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive information by instructing the user to set the
BROWSERACT_API_KEYenvironment variable rather than hardcoding it. It includes logic to detect missing keys and provides a link to the official vendor console for retrieval. - [DATA_EXFILTRATION]: While the skill transmits search parameters (keywords, brand) to an external API, this is necessary for the service to function. No sensitive local files (e.g., SSH keys, AWS configs) are accessed or transmitted.
Audit Metadata