linkfox-jiimore-niche-by-keyword
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script to perform API requests. The script (
jiimore_get_niche_info_by_keyword.py) usessys.argvto accept JSON parameters, which is a standard pattern for agent tools. It performs basic validation on the required 'keyword' parameter. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the agent to read the API key from an environment variable (
LINKFOXAGENT_API_KEY) and provides a link for users to obtain their own key if missing. No hardcoded secrets were detected. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
tool-gateway.linkfox.comandskill-api.linkfox.com. These are official vendor domains associated with the skill author 'linkfox-ai'. These requests are necessary for the primary function of the skill (fetching market data and providing feedback). - [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were found. The skill only sends parameters required by the API (keywords, filters, country codes) and feedback metadata to the vendor's endpoints.
Audit Metadata