heb-grocery-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill queries grocery product catalogs and store locations via an API, which involves searching and fetching product data based on user intent rather than consuming an unselected, outsider-authored monitored feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill utilizes an API service provided by Scavio (scavio.dev) accessed via explicit base URLs and API requests, representing a common/reputable unofficial third-party API integration dependency.