review-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses system commands such as
mkdirto create directory structures for reports andcpto manage temporary data files. - [EXTERNAL_DOWNLOADS]: The skill utilizes
curlto communicate with the external API endpointmcp.sorftime.comto retrieve product details and review data. This is part of its core functionality. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection attacks.
- Ingestion points: Untrusted data enters the agent context via Amazon product reviews fetched from the Sorftime API and stored in
raw_reviews_sse.txt. - Boundary markers: None. The skill does not instruct the agent to use delimiters or ignore potential instructions embedded within the review text.
- Capability inventory: The agent has the ability to read and write files and execute shell commands via the
Bash,Read, andWritetools. - Sanitization: There is no evidence of filtering, escaping, or validation of the external review content before it is processed by the LLM.
Audit Metadata