linkfox-amazon-store-auth
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON responses from external APIs (Amazon and LinkFox) at runtime.
- Ingestion points: Data is ingested through API responses in
scripts/authorize_url.py,scripts/authorized_stores.py,scripts/refresh_token.py,scripts/store_tokens.py, andscripts/onboarding.py. - Boundary markers: The skill uses specific JSON parsing and result extraction logic (such as the
_lf_summarizefunction inscripts/_lf_output.py) to delimit and summarize responses. - Capability inventory: The skill performs network requests via
urllibandrequests, and writes session metadata and data files to thelinkfox/directory in the project root. - Sanitization: Responses are parsed as JSON; additionally,
scripts/_token_status_output.pyexplicitly strips sensitiveaccessTokenandrefreshTokenfields from result objects before they are logged or displayed. - [EXTERNAL_DOWNLOADS]: The
scripts/onboarding.pyscript references standard Python librariesqrcode,pillow, andrequests. It provides instructions for the user to install them viapipif they are not already available in the environment. - [COMMAND_EXECUTION]: The documentation in
references/onboarding.mdprovides manual shell commands (export,setx) for the user to configure their API key in the environment. These commands are for user guidance and are not executed automatically by the agent scripts.
Audit Metadata