linkfox-amazon-reviews-list
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust authentication mechanism using environment variables (
LINKFOX_AGENT_API_KEY). Theonboarding.pyscript provides a clear path for users to obtain and configure these keys without hardcoding secrets. - [SAFE]: File operations are restricted to specific directories within the workspace or user home (
linkfox/), preventing access to sensitive system paths. It explicitly prohibits writing to/tmpto avoid shared environment vulnerabilities. - [SAFE]: All network operations are directed to the vendor's official domains (
tool-gateway.linkfox.com,api.linkfox.com,agent-api.linkfox.com) for primary functionality. - [SAFE]: The skill uses a non-blocking asynchronous pattern for long-running API tasks, avoiding potential timeouts or resource blocking during execution.
- [SAFE]: No obfuscation, prompt injection, or persistence mechanisms were detected. The scripts use standard libraries and follow intended e-commerce analytics functionality.
Audit Metadata