linkfox-amazon-product-selection

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). There are explicit instructions in the skill docs to download and install a ZIP from agent-files.linkfox.com (a direct archive download/installation instruction), which is a high-risk distribution pattern because arbitrary ZIPs can contain executables or installers and are commonly used to deliver malware if the source or contents are not verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该技能在子能力 amazon_reviews 的运行路径 POST /amazon/reviews/list 会把外部（用户指定 ASIN 对应的）评论文本 text 读入并由模型/脚本处理与输出，因此存在第三方作者的自由文本被摄取的风险。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes explicit runtime instructions to download and install remote code (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip) to load the "linkfox-onboarding" skill when onboarding.md is missing, which is a remote zip fetched/installed at runtime and could alter agent behavior or supply prompts/instructions.