linkfox-geekbi-temu-product
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes product titles and history from the Temu marketplace, which is an untrusted external source. Maliciously crafted marketplace data could attempt to influence agent behavior. Ingestion points:
scripts/geekbi_temu_goods_search.pyandscripts/geekbi_temu_goods_detail.pyretrieve marketplace data. Boundary markers: No specific delimiters or safety warnings are added to the retrieved data before it enters the agent context. Capability inventory: The skill can perform network operations to LinkFox APIs and write data to the local./linkfox/directory. Sanitization: Standard JSON serialization is used, but there is no filtering of product content itself. - [COMMAND_EXECUTION]: The skill executes local Python scripts to perform marketplace searches and detail retrieval via the LinkFox tool gateway.
Audit Metadata