ozon-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads the
ozon-mcp-rupackage from theilyautovGitHub repository. - [REMOTE_CODE_EXECUTION]: The installation instructions utilize
uvxto fetch and run code from a remote Git repository (https://github.com/ilyautov/ozon-mcp-ru) to set up the MCP server. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with the Ozon Seller API to retrieve seller data and analytics. Maliciously crafted content within the external API responses (such as product descriptions or order notes managed by third parties) could potentially be used to influence the agent's reasoning or behavior.
Audit Metadata