linkfox-amazon-store-aplus-content
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs internal command execution to verify environment prerequisites.
- Evidence: In
scripts/_spapi_aplus_common.py, theensure_auth_skill_availablefunction usessubprocess.runto execute the localscripts/check_auth_dependency.pyscript using the current Python interpreter. - [DATA_EXFILTRATION]: The skill transmits data to the vendor's API gateway.
- Evidence: Network requests are sent to
https://tool-gateway.linkfox.com. As this domain belongs to the skill's author (linkfox-ai) and serves as the documented proxy for the Amazon Selling Partner API, it is considered a legitimate vendor resource. - [SAFE]: The skill implements local file writing for auditing purposes.
- Evidence: The
emit_resultfunction inscripts/_spapi_aplus_common.pysaves full API response JSON files to alinkfoxdirectory within the user's workspace to facilitate debugging and data extraction.
Audit Metadata