Amazon Shopping Assistant: why it is not safe to use

What we found

Our review did not find hidden instructions, hardcoded live secrets, remote code download, or undisclosed data flows beyond the stated Amazon shopping workflow. Network activity we observed was limited to Amazon pages and product image URLs, and the code was readable rather than obfuscated.

The main issue was a destructive action path: the `clear-cart` tool appears to remove all cart items immediately, and its exposed tool description does not require a separate confirmation step first. In practice, that means an agent could trigger cart deletion without an explicit extra confirm interaction.

We also noted that the skill accesses a sensitive retail account context. It reads Amazon authentication cookies from a local `amazonCookies.json` file, and a helper sign-in script uses `AMAZON_EMAIL` and `AMAZON_PASSWORD` environment variables. We did not find evidence of those credentials being exfiltrated, but this setup still places account access and shopping actions in scope.

What to do instead

Prefer shopping tools that require explicit confirmation for destructive actions such as clearing a cart. Use the minimum account access needed, avoid storing long-lived session cookies where possible, and keep any login automation isolated to a dedicated low-risk account.