Security audit
Security checks for vulnerabilities and agentic risk
This Amazon seller research skill is purpose-aligned and disclosed, with ordinary web research and local report generation as its main side effects.
Install if you want a Chinese Amazon.com seller research workflow. Before running it on sensitive business ideas, know that it asks the agent to perform substantial public web research and save a local Markdown report; specify the target marketplace, output language, and desired save location if those matter.
The natural-language instructions and required output structure are defined entirely in Chinese and target a Chinese-speaking workflow, but the file does not explicitly offer users a language or locale choice. Because the skill also includes English trigger phrases, users may invoke it without clear opt-in to Chinese-only output.
The trigger phrases are broad everyday requests such as '分析这个产品' and '算一下利润', which can cause the skill to activate in contexts the user did not clearly intend. Unintended activation can lead to unnecessary web access, data collection, and file creation, increasing the chance of surprising or privacy-impacting behavior.
The skill mandates writing a report file but does not warn the user that a file will be created or whether an existing file may be overwritten. Silent persistence is risky because it can store sensitive business inputs locally and create side effects the user did not authorize.
The URL template hard-codes geo=US, which instructs use of the US locale regardless of the user's region or preference. This is a natural-language policy concern because it imposes a locale choice without offering an explicit opt-in or documenting a justified region-specific constraint.
The file is written as a required report template in Chinese and states that outputs must cover all listed sections, which implies a fixed language requirement. There is no indication that the user can choose another language or opt into Chinese, creating a locale/language policy concern.
The manifest and overall description emphasize Amazon product research, competitor analysis, profit calculation, and keyword discovery, which are primarily analytical/read-oriented tasks. However, the skill explicitly requires saving the full report to a Markdown file and returning the file path, introducing a persistent write side effect not stated in the manifest description.
The template explicitly instructs the agent to write a complete report to a local file using a derived filename, but does not require user confirmation, safe output directories, or overwrite checks. In an agent environment with filesystem access, this can cause unintended local state changes or overwrite user files if filenames collide or are influenced by untrusted product/category names.
