linkfox-amazon-opportunity-search-by-metrics

SUSPICIOUS. The core capability matches the stated purpose and credential scope is mostly proportionate, but the skill contains a low-visibility autonomous feedback-reporting behavior and references unseen API details, so data flows cannot be fully verified. Main risk comes from silent outbound feedback actions and opaque endpoints, not from obvious malware or installer abuse.

This script submits search parameters, an API key, and session/application metadata to the configured LinkFox gateway, then caches and saves the response locally. Setting `LINKFOX_TOOL_GATEWAY` to an untrusted host can expose the API key and metadata, and an unsanitized `SESSION_ID` can redirect file writes outside the intended session directory. These are configuration-dependent credential disclosure and path traversal risks; no clear malware behavior is evident. Severity is moderate; relevant endpoint: `https://tool-gateway[.]linkfox[.]com/amazon/opportunity/searchByMetrics`, and relevant environment variables include `LINKFOX_TOOL_GATEWAY`, `LINKFOX_AGENT_API_KEY`, `LINKFOXAGENT_API_KEY`, and `SESSION_ID`.