amazon-shopping
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python and Bash scripts located in the
scripts/directory to parse Amazon accessibility snapshots and rank products based on user criteria. - [EXTERNAL_DOWNLOADS]: Uses the
agent-browserCLI to accessamazon.com, a well-known and trusted service, to retrieve product information. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from Amazon search results. Maliciously crafted product information could attempt to bias the agent's recommendations.
- Ingestion points: Amazon search result snapshots and individual product page data.
- Boundary markers: Absent. The skill does not use specific delimiters or instructions to ignore potential commands within the scraped web content.
- Capability inventory: Access to
agent-browserfor web navigation and the ability to execute local scripts viabashandpython3. - Sanitization: The skill uses regex and
jqfor structured data extraction, which mitigates risk by treating most external content as data fields rather than direct instructions.
Audit Metadata