linkfox-jiimore-page-asins-by-asin
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by linkfox-ai and all API interactions target official vendor domains (tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com). The code follows standard patterns for marketplace research tools, including local caching of results to optimize performance and cost.
- [COMMAND_EXECUTION]: The Python scripts use
urllibandrequestsfor API communication andargparsefor CLI handling. Subprocess execution or shell injection patterns are not present. The scripts include standard boilerplate for session-based data storage within a localizedlinkfox/directory. - [CREDENTIALS_SAFE]: The skill correctly instructs users to manage secrets via environment variables (
LINKFOX_AGENT_API_KEY) and provides a legitimate onboarding script (onboarding.py) to help users acquire keys from the vendor's platform. No hardcoded credentials or private key exposures were found. - [DATA_EXFILTRATION]: Network operations are restricted to the vendor's own API gateways and well-known services (e.g., generating QR codes via standard libraries). No sensitive system files or credentials from the user's environment are accessed or transmitted externally.
- [EXTERNAL_DOWNLOADS]: The skill references standard package registries (PyPI for
qrcode,pillow,requests) which are common dependencies for the stated functionality. No remote code execution (e.g., curl|bash) is attempted.
Audit Metadata