linkfox-fastmoss-product-search
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill communicates with official vendor domains (*.linkfox.com) for tool functionality, authentication, and feedback reporting. All network operations are directed to infrastructure controlled by the skill author.
- [SAFE]: The onboarding process utilizes standard, user-initiated environment variable configuration for API keys, ensuring credentials are not hardcoded or automatically modified by scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests product metadata from external TikTok search results. The potential for indirect prompt injection is mitigated by specific instructions to present data in structured tables and avoid subjective interpretations of external content.
- [SAFE]: Dependency management for optional libraries like
requestsandqrcodeis handled through clear user guidance rather than automated, silent installations.
Audit Metadata