newegg-shell-shocker

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the bash tool to execute a curl command. The command is hardcoded to target an official Newegg API endpoint for fetching deal data, presenting no risk of command injection from user input.
  • [EXTERNAL_DOWNLOADS]: Fetches flash deal data in JSON format from https://www.newegg.com/api/Common/TomorrowShellShocker. This operation targets a well-known service and is entirely consistent with the skill's stated purpose of retrieving Newegg promotions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 01:53 AM