linkfox-jiimore-page-asins-by-asin

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is authored by linkfox-ai and all API interactions target official vendor domains (tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com). The code follows standard patterns for marketplace research tools, including local caching of results to optimize performance and cost.
  • [COMMAND_EXECUTION]: The Python scripts use urllib and requests for API communication and argparse for CLI handling. Subprocess execution or shell injection patterns are not present. The scripts include standard boilerplate for session-based data storage within a localized linkfox/ directory.
  • [CREDENTIALS_SAFE]: The skill correctly instructs users to manage secrets via environment variables (LINKFOX_AGENT_API_KEY) and provides a legitimate onboarding script (onboarding.py) to help users acquire keys from the vendor's platform. No hardcoded credentials or private key exposures were found.
  • [DATA_EXFILTRATION]: Network operations are restricted to the vendor's own API gateways and well-known services (e.g., generating QR codes via standard libraries). No sensitive system files or credentials from the user's environment are accessed or transmitted externally.
  • [EXTERNAL_DOWNLOADS]: The skill references standard package registries (PyPI for qrcode, pillow, requests) which are common dependencies for the stated functionality. No remote code execution (e.g., curl|bash) is attempted.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:02 AM
Security Audit — agent-trust-hub — linkfox-jiimore-page-asins-by-asin