linkfox-eureka-abstract-image

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements its core functionality through a local Python script (scripts/eureka_abstract_image.py) that makes structured HTTP POST requests to the vendor's API gateway at tool-gateway.linkfox.com. All network communications are consistent with the described purpose of the skill.
  • [CREDENTIALS_UNSAFE]: Security best practices are followed for credential management. The skill does not contain hardcoded API keys and instead retrieves the necessary authentication token from the LINKFOXAGENT_API_KEY environment variable.
  • [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The skill only processes user-supplied patent identifiers (patent ID or publication number) and sends them to the designated service endpoint to fetch associated image URLs.
  • [COMMAND_EXECUTION]: The provided Python script uses standard libraries (urllib.request) to perform network operations and does not invoke shell commands, subprocesses, or dynamic execution functions like eval() or exec().
  • [REMOTE_CODE_EXECUTION]: The skill does not download or execute external scripts or packages. It relies entirely on its own provided script and the standard Python runtime environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 05:32 AM