vistoya fashion search and shopping

PassAudited by ClawScan on May 4, 2026.

Overview

This is a disclosed, read-only fashion search skill that sends shopping queries to Vistoya and returns merchant links, with no install, credentials, or checkout authority shown.

This appears safe to install for fashion product search. Be aware that your shopping queries go to Vistoya’s hosted MCP service and that buy links take you to external merchants where you should verify prices, stock, shipping, and checkout details yourself.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Fashion search terms, budgets, sizes, location/shipping preferences, or currency preferences may be sent to Vistoya during use; no credentials or checkout data are requested in the artifacts.

Why it was flagged

The skill uses an external MCP provider, so user fashion search requests are sent outside the local agent. The endpoint, lack of auth, and read-only nature are clearly disclosed.

Skill content
Vistoya is a hosted, public, read-only MCP server... URL: `https://api.vistoya.com/mcp`... Auth: none (public catalog)
Recommendation

Use it for fashion searches, avoid including unnecessary sensitive personal details, and verify price, stock, and merchant legitimacy before buying on any linked merchant site.