google-play-store-api
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration with the Google Play Store through a dedicated third-party API provider (Scavio).
- [EXTERNAL_DOWNLOADS]: The skill references and downloads dependencies from official registries (PyPI and NPM) for the
scaviolibrary. These are identified as legitimate vendor-owned resources fromscavio-aiand do not present a security risk. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage their API keys using environment variables (
SCAVIO_API_KEY) and explicitly warns against hardcoding them in source control, which follows security best practices. - [COMMAND_EXECUTION]: The skill contains example commands for installing the vendor's SDK (
pip install scavio,npm install scavio) and setting environment variables. These are standard developer instructions and are not malicious. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill interacts solely with the specified API endpoints at
api.scavio.devto retrieve publicly available store data.
Audit Metadata