People are using Amazon's support bot as a free Claude proxy.
That bot has access to order lookups, refunds, and account data. The bot has the keys. Without a safety layer, anyone can open any door.
ASH blocks this. Open source.
github.com/use-ash/ash