linkfox-echotik-get-video-download-url
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/response_io.pyusessubprocess.run()to execute other scripts within the skill's own package. This is a standard architectural pattern for this skill set to manage large API responses and is not used for arbitrary command execution. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.com. These are official vendor endpoints for the 'linkfox-ai' author and are used for API functionality and user authentication. - [DATA_EXPOSURE]: The skill accesses local files under the
linkfox/directory within the workspace to store and cache API responses. This is standard behavior for the skill's data persistence layer and session management. - [CREDENTIALS_UNSAFE]: The onboarding script
scripts/onboarding.pyprovides instructions for users to set their API keys in environment variables (e.g.,LINKFOX_AGENT_API_KEY). It correctly manages these secrets using environment variables rather than hardcoding them.
Audit Metadata