amazon-reviews-api-skill
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.browseract.comto trigger and monitor data extraction tasks. This is the intended primary purpose of the skill and uses the official API domain of the vendor (browser-act). - [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive information by instructing the agent to use the
BROWSERACT_API_KEYenvironment variable or request it from the user. No hardcoded credentials were found in the source code. - [COMMAND_EXECUTION]: The skill executes a local Python script (
amazon_reviews_api.py) to interface with the API. The script's logic is transparent and focused solely on the API interaction and status polling. - [DATA_EXFILTRATION]: While the skill sends an ASIN (product ID) to an external API, this is a public identifier required for the service to function. No sensitive local files or user data are accessed or transmitted.
Audit Metadata