The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/_spapi_ef_common.py utilizes subprocess.run to execute a local dependency check script (check_auth_dependency.py). The execution is restricted to the local filesystem path and the current Python interpreter.
[PERSISTENCE]: The skill provides documentation in references/onboarding.md instructing users to store their LINKFOX_AGENT_API_KEY in shell configuration files like .bashrc or .zshrc. While this is a form of persistence, it is intended for the legitimate setup of the API environment.
[EXTERNAL_DOWNLOADS]: The scripts/onboarding.py script includes instructions for installing standard Python packages (requests, qrcode, pillow) to support its account management and QR code rendering features.
[INDIRECT_PROMPT_INJECTION]: The skill handles data from the Amazon SP-API, which constitutes an external ingestion point for untrusted content.
Ingestion points: Data is fetched from Amazon's APIs through several scripts including scripts/get_shipments.py and scripts/list_returns.py.
Boundary markers: No explicit delimiter or instruction-filtering markers are used for external data.
Capability inventory: The skill is capable of performing network operations to vendor domains and writing files to the local linkfox/ directory.
Sanitization: External data is parsed as JSON but string content is not specifically sanitized against prompt injection patterns before output.

linkfox-amazon-store-external-fulfillment