linkfox-keepa-product-series

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Python scripts to perform API calls and handle user onboarding. The onboarding.py script manages authentication by sending SMS codes and retrieving API keys from the LinkFox platform.
  • Evidence:
  • scripts/keepa_product_history.py executes network requests to tool-gateway.linkfox.com to fetch product time-series data.
  • scripts/onboarding.py interacts with api.linkfox.com and agent-api.linkfox.com for account login and order processing.
  • [EXTERNAL_DOWNLOADS]: The skill documents the use of standard Python packages like qrcode, pillow, and requests for its onboarding utility. These are well-known libraries from the standard Python registry.
  • [DATA_EXPOSURE]: The skill requires an API key provided via environment variables (LINKFOX_AGENT_API_KEY). The onboarding script facilitates obtaining this key but does not hardcode any sensitive credentials. It follows standard practices by instructing users to set environment variables rather than hardcoding tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 12:39 AM
Security Audit — agent-trust-hub — linkfox-keepa-product-series