linkfox-jiimore-product-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The onboarding documentation suggests installing standard Python packages (qrcode, pillow, requests) from public registries to support QR code generation and advanced networking. These are well-known libraries and the installation is initiated by the user if dependencies are missing.\n- [PERSISTENCE]: The onboarding guide provides instructions for users to manually configure their shell profiles (.bashrc, .zshrc) or use Windows commands (setx) to store an API key as an environment variable. This is a transparent, user-driven configuration step to ensure the CLI tools have the necessary credentials across sessions.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as search keywords and filtering parameters.\n
- Ingestion points: User-provided keyword and filter parameters are processed by jiimore_product_discovery.py and sent to the backend API.\n
- Boundary markers: None explicitly implemented in the script logic.\n
- Capability inventory: Scripts perform network operations (API calls to linkfox.com) and file system writes (saving results and QR codes to a local linkfox directory).\n
- Sanitization: Input parameters are parsed as JSON and re-serialized before being transmitted to the backend API, reducing the risk of injection attacks on the tool gateway.\n- [COMMAND_EXECUTION]: The agent is instructed to execute local Python scripts (jiimore_product_discovery.py and onboarding.py) to perform its core tasks. These scripts are provided as part of the skill and their behavior is consistent with the stated purpose of product discovery and account management.
Audit Metadata