linkfox-dld-product-search
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEDATA_EXFILTRATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The onboarding script (
onboarding.py) transmits the user's phone number to external vendor-controlled APIs (api.linkfox.com) to facilitate SMS-based login and authentication. - [PERSISTENCE]: The onboarding documentation (
onboarding.md) provides instructions for the agent to guide users in modifying shell configuration files (e.g.,.bashrc,.zshrc) to store API credentials. This results in the permanent storage of credentials in the user's environment. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes untrusted product data (titles, supplier names, etc.) from the 1688 platform, creating a potential surface for indirect prompt injection if the external content contains malicious instructions.
- Ingestion points: Product titles and store names retrieved from the 1688 search API in
scripts/dld_product_search.py. - Boundary markers: Data is structured in tables, but the skill lacks explicit instructions to ignore embedded prompts within the product data.
- Capability inventory: The skill can perform network requests and write search results to the local filesystem.
- Sanitization: No explicit sanitization or escaping of retrieved strings is performed before display.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of well-known third-party Python dependencies (
requests,qrcode,pillow) from public registries to support its login and payment QR code generation features.
Audit Metadata