The Agent Skills Directory

[SAFE]: The skill communicates exclusively with LinkFox vendor-owned domains (e.g., tool-gateway.linkfox.com, api.linkfox.com) for all procurement and account management operations.
[SAFE]: The shared utility script _alibaba1688_common.py includes a robust redaction mechanism (redact function) that masks sensitive keys such as api_key, access_token, and refresh_token before data is saved to disk or output to the console.
[SAFE]: High-risk write operations, including order creation and payment link retrieval, are protected by internal safety flags (e.g., confirmCreateOrder). The skill instructions explicitly mandate separate natural language confirmation from the user before these flags are enabled by the agent.
[SAFE]: The onboarding script (onboarding.py) follows standard practices for user authentication and environment setup, providing a transparent path for users to register and manage their API keys without silent or unauthorized file modifications.
[SAFE]: Dependency requirements mentioned in the onboarding documentation (requests, qrcode, pillow) are well-known, industry-standard libraries.

linkfox-1688-procurement