linkfox-amazon-store-aplus-content
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of a suite of Python scripts that interact with the Amazon Selling Partner API through a LinkFox proxy gateway. The implementation follows standard API interaction patterns.
- [COMMAND_EXECUTION]: The helper script
scripts/_spapi_aplus_common.pyusessubprocess.runto execute a local check scriptcheck_auth_dependency.py. This operation is benign, as it uses the local Python interpreter to verify internal skill dependencies. - [EXTERNAL_DOWNLOADS]: The skill communicates with legitimate, vendor-owned domains including
tool-gateway.linkfox.comandapi.linkfox.comfor its primary API operations and user onboarding processes. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided JSON parameters for its API requests. It correctly utilizes standard libraries for JSON parsing and URL encoding, which effectively mitigates common injection risks.
Audit Metadata