The Agent Skills Directory

[PERSISTENCE]: The references/onboarding.md guide instructs the agent to modify user shell configuration files (~/.zshrc, ~/.bashrc) or use Windows setx to store the LINKFOX_AGENT_API_KEY permanently. This ensures the key is available across sessions but constitutes a persistence mechanism.
[INDIRECT_PROMPT_INJECTION]: The skill processes external search data from the Google Trends API. Maliciously crafted search queries or trending terms returned by the API could potentially influence the agent's output or behavior, as there are no specific sanitization instructions provided for the interpolation of this data into the prompt context.
[EXTERNAL_DOWNLOADS]: The scripts/onboarding.py script requires the installation of the requests and qrcode Python packages to function correctly for login and payment processing, prompting the user to install them via pip.
[OBFUSCATION]: A hardcoded Base64 string is used in scripts/onboarding.py to define a default header value (_LOGIN_FIXED_UID). While not malicious, it hides the structure of a configuration object from plain-text inspection.
[COMMAND_EXECUTION]: The skill workflow involves executing helper scripts (google_trends_rising.py and onboarding.py) that perform complex network operations, file system modifications, and PII handling (phone numbers and verification codes) to facilitate vendor-specific services.

linkfox-google-trend-get-trend-by-time