micro-center-api
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external sources, specifically product descriptions and reviews from the Scavio API.
- Ingestion points: Untrusted data enters via API responses from the '/search' and '/product' endpoints.
- Boundary markers: A 'Guardrails' section provides instructions to prevent fabrication and stick to API results.
- Capability inventory: The skill uses network operations to fetch data and processes JSON responses.
- Sanitization: The skill does not explicitly provide for sanitizing or filtering the natural language data received from the API.
- [EXTERNAL_DOWNLOADS]: The skill references external software packages for its operation.
- Evidence: The documentation specifies the installation of the 'scavio' library via pip and npm, and the use of '@scavio/mcp-server'.
- Context: These packages and the associated API endpoints are official resources provided by the skill author.
Audit Metadata