skills/scavio-ai/skills/kroger-grocery-data/Snyk

kroger-grocery-data

Warn

Audited by Snyk on Nov 13, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill fetches product search results, reviews/descriptions, and store data from public grocery websites via the Scavio API, where third-party product listings or descriptions could contain untrusted text.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Nov 13, 2026, 02:36 AM

Issues

1