Dataify Walmart Products

• Outcome: Pass
• Latest audit: Jul 16, 2026 · 8:44 PM UTC
• Version: 1.2.0

Overview

This skill is a disclosed wrapper for submitting Walmart product collection jobs to Dataify, with some credential-use and broad invocation considerations users should understand.

Install only if you intend to let the agent create Dataify Walmart collection tasks. Review that DATAIFY_API_TOKEN may be read from your environment and sent to Dataify, and remove or rotate that token if you do not want future runs to use it automatically.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 85% confidence
• Finding: The skill instructs the agent to access environment variables and make outbound network requests, but no declared permissions are provided. This creates a governance gap: the runtime may allow sensitive token access and external submission behavior without clear user-visible authorization boundaries or review.

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The invocation description is overly broad and can trigger on generic scraping, troubleshooting, token configuration, or status-related requests, causing the wrong skill to activate. Over-broad routing increases the chance of unintended credential handling or external task submission when the user did not clearly request this specific Dataify Walmart workflow.

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger description is overly broad and includes many natural-language phrases for scraping, collecting, troubleshooting, token handling, and status checking. This can cause the skill to activate for loosely related user requests, increasing the chance that it captures conversations involving credentials or performs unintended external task submissions.

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The skill enables allow_implicit_invocation without any constraints in this file that narrowly limit when the agent may auto-select it. Because this skill can submit external Dataify Walmart scraping/collection tasks, broad implicit activation increases the chance of unintended third-party requests, data collection actions, or prompt-triggered misuse from ambiguous user input.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The script sends the supplied API token to an external Dataify endpoint in the Authorization header, but the CLI help and normal output do not clearly disclose that the token will be transmitted off-host to a third-party service. In an agent-skill context, users may provide secrets assuming they are only local configuration, so insufficient disclosure increases the risk of inadvertent credential exposure to an external platform.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

- If the user provides a token in the request, use it for this run.
- If no token is provided, first check whether `DATAIFY_API_TOKEN` is already saved locally in the environment.
- If `DATAIFY_API_TOKEN` is saved locally, use it without asking the user to re-enter the token.
- If no token is available locally, tell the user they need to provide a Dataify API TOKEN.
- If the user does not have an API TOKEN, tell them they can register or log in at [Dataify](https://dashboard.dataify.com/login?utm_source=skill) to get one.
- If the user already has an API TOKEN, tell them it is available in the top-right area of [Dataify](https://dashboard.dataify.com?utm_source=skill).

• Confidence: 80% confidence
• Finding: The skill directs the agent to automatically check for and use a locally saved `DATAIFY_API_TOKEN` without asking the user again. Even if convenient, autonomous credential use can violate user expectations and lead to external actions being performed under stored credentials without fresh consent.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.