linkfox-etsy-store-query

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). One URL is a direct download link to a ZIP that the skill instructs you to download and install (distribution of executable/code via an archive), which is a higher-risk pattern for malware distribution even though the domain matches other LinkFox endpoints.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required workflow calls a third-party MCP tool (_ehunt_storeQuery) and then prints/serializes the returned JSON (including free-text fields like storeName/storeUrl/shopWebsite) into the agent’s runtime context via stdout/inline output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The SKILL.md explicitly instructs the agent at runtime to download and install remote code from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip which would fetch and install executable skill content that can directly control agent behavior.