OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
The skill is generally safe and designed for Amazon seller automation using Amazon's official SP-API and Ads API via an MCP server. A minor security consideration exists regarding how the agent handles untrusted data, such as buyer names or external product descriptions, which could lead to indirect prompt injection if not properly sanitized before use in automated messaging or listing updates.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed