linkfox-echotik-list-seller
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate tool for TikTok marketplace analytics, developed by linkfox-ai and utilizing official vendor domains (linkfox.com, linkfox-ai.com) for its API and authentication services.
- [EXTERNAL_DOWNLOADS]: The onboarding script references well-known Python packages (
requests,qrcode) for its operation. These are standard dependencies for network operations and QR code generation and are requested through user-guided pip installation. - [PERSISTENCE]: The skill's documentation guides users to persist their API keys by manually adding environment variables to their shell profiles (
.bashrc,.zshrc). This is a transparent, user-initiated action that follows standard developer practices for credential management. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves store names, category descriptions, and performance metrics from the EchoTik API. This constitutes a standard data ingestion surface required for the skill's primary purpose; the risk is mitigated as the skill only processes this data for display and logging rather than using it to drive high-privilege operations.
Audit Metadata