linkfox-aigc-imagegen-brand-gene-extract

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Most links are internal docs/gateway (low risk), but the entry pointing to https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip (a direct downloadable release ZIP with instructions to install) is a high‑risk indicator for distributing executables/archives and should be treated as suspicious and require explicit user authorization and verification.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在步骤1将用户输入的 brandKey 拼入步骤2 prompt 并在步骤3通过 linkfox-aigc-textgen 读入执行，LLM 实际会摄入该用户“free text”并据此生成可回读提取内容。