linkfox-amazon-store-fulfillment-inbound
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runin_spapi_fulfillment_inbound_common.pyto execute a local dependency check script (check_auth_dependency.py). This is a legitimate internal operation to ensure required components are present and uses the current Python interpreter. - [EXTERNAL_DOWNLOADS]: The skill communicates with official vendor domains (
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.com) to proxy requests to Amazon SP-API and handle account onboarding. These network operations are necessary for the skill's functionality and target the vendor's established infrastructure. - [DATA_EXPOSURE]: Authentication is managed via the
LINKFOX_AGENT_API_KEYenvironment variable. The skill correctly instructs the agent and user on how to set this up and specifically warns against including sensitive Amazon access tokens in request payloads. - [SAFE]: The skill implements thorough input validation for all Amazon API parameters, follows best practices for handling asynchronous operations, and manages response data locally in a structured manner using SESSION_ID for isolation.
Audit Metadata