linkfox-echotik-batch-product-detail
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly manages sensitive information by instructing users to set API keys via environment variables (LINKFOX_AGENT_API_KEY) rather than hardcoding them.
- [SAFE]: Network operations are restricted to the vendor's official domains (linkfox.com and linkfox-ai.com) for data retrieval and feedback reporting.
- [SAFE]: The inclusion of
response_io.pyserves as a performance optimization tool, usingsubprocess.runto execute local skill scripts and manage large JSON outputs by saving them to the project's local directory (linkfox/) and providing summaries to the agent. - [SAFE]: The
onboarding.pyscript provides a transparent mechanism for users to register, login, and manage their API usage credits through standard SMS verification and QR-based payment links. - [SAFE]: Shell profile modification suggestions in
onboarding.mdare presented as explicit configuration guidance for the user to persist their own API keys, which is standard developer practice.
Audit Metadata