linkfox-ebay-search
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted third-party content from eBay product listings, which could potentially contain malicious instructions or hidden text designed to influence the agent's behavior.
- Ingestion points:
scripts/ebay_search.pyfetches data such as product titles, descriptions, and seller information from eBay via a gateway API. - Boundary markers: There are no explicit delimiters or specific instructions provided to the agent to treat the retrieved eBay listing data as untrusted or to ignore any embedded instructions.
- Capability inventory: The agent has the ability to execute local Python scripts, write files to the project directory for data persistence, and perform network requests to vendor-controlled domains.
- Sanitization: The skill does not implement any visible sanitization or filtering of the eBay listing content before it is presented to the agent or the user.
- [EXTERNAL_DOWNLOADS]: The skill's scripts connect to various subdomains of
linkfox.comandlinkfox-ai.comto perform product searches, handle user authentication, and process payments. These network operations are consistent with the infrastructure of the skill's author,linkfox-ai.
Audit Metadata