linkfox-lanjing-mercado-product-selection
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill executes local Python scripts to interact with the LinkFox gateway and manage authentication. All network communications are directed to vendor-owned subdomains of
linkfox.com(such astool-gateway.linkfox.comandapi.linkfox.com), which is consistent with the skill's primary function and author identity. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from Mercado Libre, which presents an inherent surface for indirect prompt injection. This risk is inherent to the skill's purpose and is managed through the implementation of local data persistence and summarization logic.
- Ingestion points: External data is ingested via the unified LinkFox tool gateway in
scripts/linkfox_lanjing_mercado_product_selection.pyfrom tools such asitemSearchandreviewSearch. - Boundary markers: The instructions guide the agent to summarize results and prioritize reading from persisted JSON files, avoiding full raw data interpolation into the prompt context.
- Capability inventory: The skill's scripts possess capabilities for network requests and local file writing to the
./linkfoxdirectory. - Sanitization: Ingested data is stored in structured JSON files, enabling the use of precise parsing tools like
jqto isolate specific fields and minimize the risk of executing embedded malicious instructions.
Audit Metadata