linkfox-eureka-claim-data

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Secret Management: The skill uses the environment variable LINKFOXAGENT_API_KEY for authentication, which is the recommended method for handling sensitive credentials in agent skills to avoid hardcoding.
  • [SAFE]: Network Communications: The script and API documentation reference the vendor's official endpoints (tool-gateway.linkfox.com and skill-api.linkfox.com). No suspicious or third-party domains were detected.
  • [SAFE]: Minimal Capabilities: The Python script scripts/eureka_claim_data.py is restricted to fetching data via HTTP requests and parsing JSON results. It does not perform any dangerous operations such as file system modifications, persistent storage, or arbitrary command execution.
  • [SAFE]: Data Ingestion: The skill processes external data (patent claims). While this involves a standard surface for potential indirect prompt injection, the skill lacks the capabilities to perform dangerous actions based on that data, and the primary data source is a structured patent database.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 05:32 AM