linkfox-kalodata-tiktok-creator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external content from TikTok creator profiles, including the
creator_biofield, via thescripts/kalodata_creator_detail.pyscript. This represents an ingestion point for untrusted data that could influence agent behavior. - Ingestion points: External creator metadata fetched from the Kalodata API in
scripts/kalodata_creator_detail.py. - Boundary markers: The prompt instructions do not provide specific delimiters or 'ignore' instructions for the agent when processing profile data.
- Capability inventory: The skill possesses network access to vendor APIs and file-writing capabilities for logging and caching.
- Sanitization: The scripts do not perform sanitization of the bio text or other descriptive fields before returning them to the agent context.
- [DYNAMIC_EXECUTION]: The scripts
kalodata_creator_detail.pyandkalodata_creator_search.pydynamically modify the Pythonsys.pathat runtime to import shared modules from a relative parent directory (../../_shared). This is a standard practice for internal library management within the vendor's project structure. - [PERSISTENCE]: The
references/onboarding.mdfile provides instructions for users to manually add theLINKFOX_AGENT_API_KEYto their shell profiles (e.g.,.zshrc,.bashrc) or Windows environment variables. This establishes persistent access for the authentication credentials. - [EXTERNAL_DOWNLOADS]: The skill communicates with vendor-controlled domains including
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.com. These resources are used for data access, login services, and user management consistent with the vendor's infrastructure. - [COMMAND_EXECUTION]: The onboarding documentation guides the user to manually execute shell commands to configure their environment variables. The skill scripts themselves do not automatically execute these system-level commands.
Audit Metadata