linkfox-echotik-seller-detail
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard API integration patterns for the EchoTik TikTok Shop analytics service.
- [EXTERNAL_DOWNLOADS]: The
scripts/onboarding.pyscript includes an optional command to generate QR codes which may prompt the user to install theqrcodeandpillowPython packages from PyPI if not present. This is a standard utility function and is considered safe. - [COMMAND_EXECUTION]: The skill uses Python scripts to perform network requests and data processing. These scripts are self-contained and do not perform arbitrary command execution or access sensitive local files. User input (sellerId) is passed as a parameter to the API and is not used in unsafe shell operations.
- [CREDENTIALS_UNSAFE]: The skill correctly manages API keys by reading them from environment variables (
LINKFOX_AGENT_API_KEY). It includes guidance inreferences/onboarding.mdfor users to securely set these variables rather than hardcoding secrets.
Audit Metadata