linkfox-amazon-alexa-search
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts (
amazon_alexa_search.py,onboarding.py) to interface with its API. These scripts perform routine file operations like caching results in a locallinkfoxdirectory and updating a session metadata file (_meta.json). - [EXTERNAL_DOWNLOADS]: The
onboarding.pyscript includes functionality to generate QR codes for payments, which may require installing theqrcodeandpillowlibraries if not present. These are well-known, standard packages for this purpose. - [CREDENTIALS_MANAGEMENT]: The skill follows secure practices by instructing users to manage their API keys via environment variables (
LINKFOX_AGENT_API_KEY) rather than hardcoding them. The onboarding script facilitates obtaining these keys through a legitimate authentication flow with the vendor's services.
Audit Metadata