flipkart seller dashboard

• Outcome: Review
• Latest audit: Sep 11, 2026 · 1:26 AM UTC
• Version: 1.0.0

Overview

This is a coherent seller-dashboard skill, but it can make live marketplace account changes and its price-update flow lacks an explicit confirmation or guardrails.

Review before installing if this skill will connect to a real seller account. Use restricted API credentials where possible, confirm who can send WhatsApp commands, and require an explicit approval step for price changes and cancellations before allowing production use.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Credential Access

High

• Category: Privilege Escalation

Content

Uses the **Flipkart Marketplace Seller API**:
- **Base URL**: `https://api.flipkart.net/sellers/`
- **Auth**: OAuth2 — use `FLIPKART_APP_ID` and `FLIPKART_APP_SECRET` to get access token
- **Token endpoint**: `https://api.flipkart.net/sellers/oauth-service/oauth/token`

### Get Access Token

• Confidence: 70% confidence
• Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Credential Access

High

• Category: Privilege Escalation

Content

- **Auth**: OAuth2 — use `FLIPKART_APP_ID` and `FLIPKART_APP_SECRET` to get access token
- **Token endpoint**: `https://api.flipkart.net/sellers/oauth-service/oauth/token`

### Get Access Token
```
POST https://api.flipkart.net/sellers/oauth-service/oauth/token
Content-Type: application/x-www-form-urlencoded

• Confidence: 70% confidence
• Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

External Transmission

Medium

• Category: Data Exfiltration

Content

## Flipkart Seller API Setup

Uses the **Flipkart Marketplace Seller API**:
- **Base URL**: `https://api.flipkart.net/sellers/`
- **Auth**: OAuth2 — use `FLIPKART_APP_ID` and `FLIPKART_APP_SECRET` to get access token
- **Token endpoint**: `https://api.flipkart.net/sellers/oauth-service/oauth/token`

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

## Flipkart Seller API Setup

Uses the **Flipkart Marketplace Seller API**:
- **Base URL**: `https://api.flipkart.net/sellers/`
- **Auth**: OAuth2 — use `FLIPKART_APP_ID` and `FLIPKART_APP_SECRET` to get access token
- **Token endpoint**: `https://api.flipkart.net/sellers/oauth-service/oauth/token`

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

## Flipkart Seller API Setup

Uses the **Flipkart Marketplace Seller API**:
- **Base URL**: `https://api.flipkart.net/sellers/`
- **Auth**: OAuth2 — use `FLIPKART_APP_ID` and `FLIPKART_APP_SECRET` to get access token
- **Token endpoint**: `https://api.flipkart.net/sellers/oauth-service/oauth/token`

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill enables live price changes on marketplace listings via natural-language commands but does not clearly warn that this is a real production action with business impact. In a commerce operations context, ambiguous command handling or accidental invocation could immediately alter listing prices, affecting revenue, margins, and marketplace competitiveness.

Natural-Language Policy Violations

Low

• Confidence: 84% confidence
• Finding: The skill states that the assistant is for Indian marketplace sellers and the rest of the document hardcodes India-specific assumptions such as Amazon India, IST scheduling, and rupee-denominated outputs. This imposes a locale-specific operating mode without stating that the user can choose or confirm the locale, which may violate language/locale policy requirements.

Static analysis

No suspicious patterns detected.