linkfox-keepa-product-series
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Python script (
scripts/keepa_product_history.py) that handles API requests to the vendor's Keepa data gateway. The script includes logic for localized caching and structured output management within the project workspace.\n- [EXTERNAL_DOWNLOADS]: Provides instructions to download an auxiliary onboarding skill from the vendor's official domain (agent-files.linkfox.com) if authentication or credit issues are encountered.\n- [REMOTE_CODE_EXECUTION]: The instructions directed at the agent to install a remote skill package from a vendor-controlled URL represent a functional dependency for onboarding. This behavior is considered safe as it targets the author's own verified infrastructure.\n- [SAFE]: No evidence of prompt injection, data exfiltration to unauthorized third parties, or obfuscated code was identified. The skill adheres to security best practices by utilizing environment variables for secret management and providing transparent API references.
Audit Metadata