linkfox-google-patent-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions the use of well-known libraries such as
requests,qrcode, andpillowfor account management and QR code generation inscripts/onboarding.py. These are standard, reputable packages. - [DATA_EXFILTRATION]: The skill uses environment variables (
LINKFOX_AGENT_API_KEY) to manage authentication tokens. These tokens are sent only to the official vendor gateway (tool-gateway.linkfox.com) and related identity services (api.linkfox.com,agent-api.linkfox.com). - [COMMAND_EXECUTION]: The skill executes local Python scripts (
google_patent_search.py,onboarding.py) to handle API requests and user configuration. These scripts do not take unsanitized input into dangerous system shells and operate within the project's directory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests patent data from Google Patents. While this represents a data ingestion surface, the skill is restricted to retrieving bibliographic information and saving it to local JSON files, with no dangerous capabilities (like code execution or unauthorized network access) that could be triggered by malicious data content.
Audit Metadata