The Agent Skills Directory

[SAFE]: The skill is a legitimate tool for TikTok e-commerce analysis. It utilizes vendor-owned subdomains (linkfox.com) for data retrieval, authentication, and feedback, which is consistent with the skill's stated purpose and author information.
[EXTERNAL_DOWNLOADS]: The onboarding documentation (references/onboarding.md) and script (scripts/onboarding.py) suggest that the user install well-known Python packages qrcode, pillow, and requests to enable full functionality for QR code generation and API communication.
[COMMAND_EXECUTION]: The skill uses Python scripts to perform authenticated API calls and manage local data storage. It also provides instructions for users to execute standard shell commands (setx, export) to configure their API keys in the environment.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external product data from the FastMoss API. While the data is returned in a structured JSON format, the processing of third-party product titles and descriptions presents a theoretical surface for prompt injection, though the risk is minimal given the specialized nature of the query results.
[DYNAMIC_EXECUTION]: The main analysis script (scripts/fastmoss_product_rank_top_selling.py) modifies the system path at runtime to look for a shared library directory (_shared). This is a common pattern for LinkFox skills and is used here to potentially load internal helper modules, although no such modules are imported in the provided source code.

linkfox-fastmoss-product-rank-top-selling