linkfox-amazon-opportunity-report-by-keyword
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts to perform API calls and handle user onboarding. The instructions involve executing these scripts via the command line (e.g.,
python scripts/amazon_opportunity_report.py). This is standard behavior for local agent tools. - [EXTERNAL_DOWNLOADS]: The skill fetches data from
tool-gateway.linkfox.comandapi.linkfox.com. These are official vendor domains for 'linkfox-ai' and are used for legitimate report generation and account management. - [DATA_EXPOSURE]: The skill instructs the agent to store reports in the local project directory under
<cwd>/linkfox/. Sensitive API keys are managed via environment variables (LINKFOX_AGENT_API_KEY), which is a recommended security practice for secrets management.
Audit Metadata