walmart-product-data
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions and structure follow standard patterns for data-retrieval tools with no evidence of malicious intent or safety bypasses.
- [EXTERNAL_DOWNLOADS]: Network requests are directed exclusively to the official API domain (api.scavio.dev) associated with the skill author, scavio-ai.
- [CREDENTIALS_UNSAFE]: The skill implements a secure approach to authentication by utilizing a dedicated environment variable (SCAVIO_API_KEY) and provides clear guidance on keeping secrets out of source control.
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a conduit for third-party product data (Ingestion point: Walmart responses via api.scavio.dev). While explicit boundary markers and sanitization are absent, the risk is classified as safe because the skill's capability inventory is limited to displaying retrieved information, with no dangerous tools such as shell execution or file system writes available to be exploited.
Audit Metadata