linkfox-echotik-list-seller-product
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts (
echotik_list_seller_product.pyandonboarding.py) to interact with the LinkFox API and manage user authentication. These scripts perform standard network operations and local file writing within the project'slinkfox/directory. - [EXTERNAL_DOWNLOADS]: The
onboarding.pyscript includes instructions for users to install standard, well-known dependencies (requests,qrcode,pillow) viapipif they are missing. These are legitimate utilities for the skill's functionality. - [CREDENTIALS_SAFE]: The skill correctly instructs users to manage their API keys via environment variables (
LINKFOX_AGENT_API_KEY). It does not contain hardcoded secrets or unsafe credential storage practices. - [DATA_EXPOSURE]: The skill writes API responses to the local project directory for persistence and debugging. This behavior is documented and scoped to the user's workspace, avoiding sensitive system paths.
Audit Metadata