Review recommended
Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.
Gen Agent Trust Hub
passThe skill is generally safe and performs its intended function of Amazon listing optimization. It fetches public product data from Amazon marketplaces using a bundled script. However, it is susceptible to indirect prompt injection because it processes untrusted content from external product listings without using boundary markers or sanitization, which could allow an attacker to influence the agent by embedding instructions in a listing.
Socket
passNo alerts
Snyk
warnRisk: MEDIUM · 2 issues
ZeroLeaks
passScore: 93/100 · 2 sections analyzed