linkfox-aba-intelligent-query
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts (
aba_query.pyandonboarding.py) to interact with the LinkFox API and manage user accounts. These scripts are executed via the command line with JSON arguments. - [EXTERNAL_DOWNLOADS]: The
onboarding.pyscript attempts to import theqrcodeandrequestslibraries. If missing, it provides instructions for the user to install them viapip. While this involves downloading external code, it targets standard, well-known libraries from the official Python Package Index (PyPI) and requires manual user intervention. - [DATA_EXPOSURE]: The skill writes session logs and query results to a local
linkfox/directory within the project workspace. It specifically includes logic to avoid writing to system/tmpdirectories and ensures the location is writable by the current user. Sensitive data likeLINKFOX_AGENT_API_KEYis retrieved from environment variables rather than being hardcoded. - [VENDOR_RESOURCES]: All network activity is directed toward official
linkfox.comsubdomains (e.g.,tool-gateway.linkfox.com,api.linkfox.com). These are identified as legitimate resources belonging to the skill author (linkfox-ai).
Audit Metadata