linkfox-geekbi-temu-search-by-image
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing local Python scripts (
scripts/upload_image.py,scripts/geekbi_temu_goods_image_search.py,scripts/onboarding.py) to interface with the LinkFox API and manage user sessions. - [EXTERNAL_DOWNLOADS]: The onboarding script (
scripts/onboarding.py) references external Python dependencies such asrequests,qrcode, andpillow, providing instructions for users to install them viapipif they are not present in the environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes live marketplace data from Temu. To mitigate potential risks from untrusted external content, the instructions advise the agent to use structured data extraction tools like
jqto limit the volume of raw data entering the LLM's context.
Audit Metadata