Skills
Navigate
skills/linkfox-ai/linkfox-skills/linkfox-1688-search-by-image/Gen Agent Trust Hub

linkfox-1688-search-by-image

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python scripts (scripts/alibaba1688_image_search.py, scripts/upload_image.py, and scripts/onboarding.py) to interface with the vendor's APIs. These scripts perform standard network requests and file operations within the designated linkfox/ workspace directory.
  • [EXTERNAL_DOWNLOADS]: The scripts/upload_image.py script facilitates uploading local user images to a vendor-controlled OSS gateway (tool-gateway.linkfox.com) to generate public URLs required by the 1688 search API.
  • [DATA_EXPOSURE]: The skill handles user-provided image data (URL or Base64) and transmits it to the 1688 search gateway. It also manages an API key via environment variables (LINKFOX_AGENT_API_KEY). The onboarding.py script handles sensitive user operations like SMS login and order placement, all directed to the vendor's official domains (api.linkfox.com, agent-api.linkfox.com).
  • [SAFE]: All external resources, including API endpoints (tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com) and documentation links, belong to the verified vendor linkfox-ai. The code follow standard practices for an e-commerce agent tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 03:38 PM
Security Audit — agent-trust-hub — linkfox-1688-search-by-image