The Agent Skills Directory

[SAFE]: The skill provides structured access to product data via the vendor's official API at api.scavio.dev. All network operations are directed at the author's infrastructure or well-known Kohl's domains for product images.
[SAFE]: Credential management is handled through the SCAVIO_API_KEY environment variable, which is the standard and secure method for managing secrets in AI agent skills.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external API responses (such as product descriptions and badges) which constitutes an ingestion surface. However, the risk is negligible as the skill lacks high-privilege capabilities like local file writes or arbitrary command execution that could be exploited by such data.

kohls-product-data