linkfox-amazon-store-external-fulfillment
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/_spapi_ef_common.pyto execute a local dependency check script (check_auth_dependency.py). This is a benign internal mechanism used to verify that the requiredlinkfox-amazon-store-authskill is installed in the environment. - [EXTERNAL_DOWNLOADS]: All network requests are directed to official LinkFox domains (
tool-gateway.linkfox.com,api.linkfox.com,agent-api.linkfox.com). These communications are necessary for the skill's primary functions, including API proxying, user authentication, and billing management. - [CREDENTIALS_SAFE]: The skill manages authentication via the
LINKFOX_AGENT_API_KEYenvironment variable. The providedonboarding.pyscript facilitates a legitimate login process to help users obtain their keys, which are then handled according to standard security practices for CLI tools. - [DATA_EXPOSURE]: The skill includes a logging mechanism that saves API responses to a local
linkfox/directory. This behavior is documented and intended for session management and debugging within the LinkFox ecosystem.
Audit Metadata