Security audit
Security checks for vulnerabilities and agentic risk
The skill performs its advertised review analysis and clearly discloses its service authentication, paid actions, and browser extension requirements.
Use a read-only AstrMap key when only viewing existing results, and prefer environment-variable configuration over placing keys in commands. Confirm paid work before execution because the helper does not enforce confirmation itself. For collection, review the separate extension's permissions and use an isolated browser profile with a dedicated Amazon buyer account. Install a reviewed Requests version.
scripts/api_client.pyCredit-consuming actions bypass the documented confirmation requirement
An unconfirmed invocation can consume the user's available AstrMap credits. The exposure is limited to valid credentials and service-side permissions and balance checks.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
}
try:
response = requests.post(url, json=data or {}, headers=headers, timeout=30)
response.raise_for_status()
result = response.json()
if result.get("code") != 0:
Without declared permissions the skill's intent is opaque and cannot be validated.
L024 instructs the agent to reply in English whenever the user's input is not Chinese, including input in Spanish, Japanese, or other languages. This overrides the user's language without offering a choice or documenting a justified locale restriction.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
resp = requests.post(url, headers=headers, json=payload)
if resp.status_code == 400:
err = resp.json().get("detail", {})
msg = err.get("msg", "")
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
}
try:
response = requests.post(url, json=data or {}, headers=headers, timeout=30)
response.raise_for_status()
result = response.json()
if result.get("code") != 0:
The dependency specifies a minimum version without an exact pin or integrity hashes, allowing installations to resolve to different releases over time. This is a dependency-management weakness rather than evidence of malicious behavior; because the skill retrieves external review data, an unexpected dependency change could affect its network operations.
requests>=2.28.0
OSV returned advisories for this package, but its resolved version is unknown. A package-name lookup does not establish whether the installed release is affected by those advisories.