linkfox-aigc-videogen
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python scripts to interact with LinkFox API services. The
aigc_videogen.pyscript handles the asynchronous video generation workflow, including task creation and status polling. Theonboarding.pyscript provides a CLI for account management tasks such as login and order processing. All command executions are within the expected scope of the skill's functionality. - [EXTERNAL_DOWNLOADS]: The skill downloads generated video media from LinkFox's API-provided URLs to a local session directory. These downloads are a core part of the video generation service and target the vendor's infrastructure.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage their API keys through environment variables (
LINKFOX_AGENT_API_KEYorLINKFOXAGENT_API_KEY) and provides a helper script for secure authentication. No hardcoded secrets were found in the codebase. - [DATA_EXFILTRATION]: Network activity is restricted to communication with legitimate vendor domains (
*.linkfox.com) for the purpose of executing AI tasks and managing account settings. There is no evidence of unauthorized data transfer to third-party or suspicious locations.
Audit Metadata