whole-foods-grocery-data
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates legitimate access to Whole Foods Market data via the Scavio API, supporting search and store-related functions.\n- [EXTERNAL_DOWNLOADS]: The documentation points to official scavio packages on PyPI and NPM, as well as the Scavio MCP server. These are recognized as author-owned resources.\n- [CREDENTIALS_UNSAFE]: The skill requires a SCAVIO_API_KEY. It provides clear instructions on obtaining a key from the vendor's dashboard and emphasizes secure handling through environment variables.\n- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided search terms and location data to query the API. This is a standard functional requirement and does not present an elevated security risk in this context.
Audit Metadata