Trust Assessment
amazon-product-search-api-skill received a trust score of 67/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 4 findings: 0 critical, 1 high, 3 medium, and 0 low severity. Key findings include Missing required field: name, Suspicious import: requests, Potential Command Injection via Shell Execution.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings4
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via Shell Execution The skill explicitly instructs the agent to execute a shell command using `python -u ...` with user-provided parameters (Keywords, Brand, Quantity, language). If the agent constructs this command string by directly interpolating untrusted user input without proper shell escaping, a malicious user could inject arbitrary shell commands. For example, providing input like `'; rm -rf /; echo '` for a parameter could lead to arbitrary code execution on the host system. Instruct the agent to use a safe execution mechanism (e.g., `subprocess.run` with `shell=False` and passing arguments as a list) or ensure all user-provided arguments are properly shell-escaped before constructing the command string for execution. | LLM | SKILL.md:68 | |
| MEDIUM | Missing required field: name The 'name' field is required for claude_code skills but is missing from frontmatter. Add a 'name' field to the SKILL.md frontmatter. | Static | skills/phheng/amazon-product-search-api-skill/SKILL.md:1 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/phheng/amazon-product-search-api-skill/scripts/amazon_product_search_api.py:3 | |
| MEDIUM | Insecure Credential Handling (Credential Harvesting) The skill instructs the agent to ask the user for the `BROWSERACT_API_KEY` directly in the chat dialog if it's not found in the environment. Receiving sensitive credentials like API keys in plain text within a chat history is insecure, as chat logs may be stored or accessible in ways that are less secure than dedicated secret management systems or environment variables. This practice constitutes credential harvesting from the user via an insecure channel. Instruct the agent to guide the user to set the API key securely (e.g., via a platform-specific secret management system or environment variable setup outside of the chat) rather than asking for it directly in the chat dialog. | LLM | SKILL.md:40 |
Scan History
Embed Code
[](https://skillshield.io/report/a0dc6bc5eca97faa)
Powered by SkillShield