ulta-beauty-api
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill instructions and metadata are consistent with its stated purpose of providing an interface to the Ulta Beauty API.
- [EXTERNAL_DOWNLOADS]: The skill documentation references the 'scavio' Python and Node.js packages, as well as the '@scavio/mcp-server' package. These are official resources provided by the skill author, scavio-ai, and are used to facilitate API communication.
- [COMMAND_EXECUTION]: The setup instructions include standard shell commands for setting environment variables and installing necessary dependencies through official package registries.
- [DATA_EXFILTRATION]: Network communication is directed solely to the vendor's official API endpoint (api.scavio.dev). There is no evidence of sensitive local data access or transmission to unauthorized third parties.
Audit Metadata