skills/scavio-ai/skills/vinted-api/Gen Agent Trust Hub

vinted-api

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to api.scavio.dev to fetch Vinted listings, seller profiles, and categories. These resources are part of the vendor's own infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-generated content (listings and seller reviews) from Vinted.
  • Ingestion points: Data retrieved from vinted/search, vinted/product, and vinted/seller-feedback in SKILL.md.
  • Boundary markers: Absent; the skill does not define specific delimiters for external content.
  • Capability inventory: The skill performs network operations via the scavio SDK and requests library to the vendor's API.
  • Sanitization: No explicit sanitization or filtering of fetched marketplace content is specified.
  • [COMMAND_EXECUTION]: Documentation provides examples for setting environment variables and installing packages (e.g., pip install scavio). These are standard usage instructions for the provided tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 02:36 AM