dicks-sporting-goods-api
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill facilitates interaction with the Scavio Dick's Sporting Goods API for product research and monitoring.
- [EXTERNAL_DOWNLOADS]: References official
scaviopackages on PyPI and NPM, as well as the Scavio MCP server. These are standard, versioned dependencies for the vendor's service. - [DATA_EXFILTRATION]: Communicates with
api.scavio.dev, which is the vendor's documented API endpoint. No unauthorized data exfiltration or credential harvesting patterns were observed. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as product reviews and descriptions. While this provides a theoretical attack surface for indirect prompt injection, the instructions include specific guardrails to quote text verbatim and limit the agent's interpretation, which effectively mitigates the risk.
Audit Metadata