vinted-api
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.scavio.devto fetch Vinted listings, seller profiles, and categories. These resources are part of the vendor's own infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-generated content (listings and seller reviews) from Vinted.
- Ingestion points: Data retrieved from
vinted/search,vinted/product, andvinted/seller-feedbackinSKILL.md. - Boundary markers: Absent; the skill does not define specific delimiters for external content.
- Capability inventory: The skill performs network operations via the
scavioSDK andrequestslibrary to the vendor's API. - Sanitization: No explicit sanitization or filtering of fetched marketplace content is specified.
- [COMMAND_EXECUTION]: Documentation provides examples for setting environment variables and installing packages (e.g.,
pip install scavio). These are standard usage instructions for the provided tools.
Audit Metadata