linkfox-etsy-product-query
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/etsy_product_query.pyandscripts/onboarding.py) intended for debugging and user onboarding. These scripts perform standard API requests usingurllibandrequests. Theonboarding.pyscript provides commands for system environment configuration (e.g.,setx,export) to help users persist their API keys, which is a standard developer workflow. - [EXTERNAL_DOWNLOADS]: The
onboarding.pyscript may require the installation of theqrcodeandrequestsPython packages if they are not already present in the environment. These are well-known, standard libraries used for their intended purposes (generating payment QR codes and performing HTTP requests). - [DATA_EXPOSURE_&_EXFILTRATION]: The skill transmits search parameters and session identifiers to the developer's official gateway (
tool-gateway.linkfox.com) and API endpoints (api.linkfox.com,agent-api.linkfox.com). This is necessary for the skill's primary function of providing Etsy data and managing user accounts. No sensitive local files or unauthorized credentials are accessed or exfiltrated. - [CREDENTIALS_SAFE]: The skill correctly instructs users to manage their API keys via environment variables (
LINKFOX_AGENT_API_KEY). It provides automated ways to retrieve these keys from the developer's service but does not hardcode any secrets or suggest insecure storage practices.
Audit Metadata