linkfox-ebay-search

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted third-party content from eBay product listings, which could potentially contain malicious instructions or hidden text designed to influence the agent's behavior.
  • Ingestion points: scripts/ebay_search.py fetches data such as product titles, descriptions, and seller information from eBay via a gateway API.
  • Boundary markers: There are no explicit delimiters or specific instructions provided to the agent to treat the retrieved eBay listing data as untrusted or to ignore any embedded instructions.
  • Capability inventory: The agent has the ability to execute local Python scripts, write files to the project directory for data persistence, and perform network requests to vendor-controlled domains.
  • Sanitization: The skill does not implement any visible sanitization or filtering of the eBay listing content before it is presented to the agent or the user.
  • [EXTERNAL_DOWNLOADS]: The skill's scripts connect to various subdomains of linkfox.com and linkfox-ai.com to perform product searches, handle user authentication, and process payments. These network operations are consistent with the infrastructure of the skill's author, linkfox-ai.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 03:15 AM