linkfox-mpstats-ozon-category-products
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The onboarding documentation in
references/onboarding.mdinstructs users or agents to modify shell profile files (e.g.,~/.zshrc,~/.bashrc) or use the Windowssetxcommand to persist API key environment variables. While these are persistence mechanisms, they are used here for standard application configuration. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves product data from external Ozon listings which may contain untrusted text. This constitutes an indirect prompt injection surface as the agent processes and summarizes these external strings.\n
- Ingestion points: Product titles, brands, and seller names retrieved from
tool-gateway.linkfox.cominscripts/mpstats_ozon_category_products.py.\n - Boundary markers: The script does not implement specific delimiters or 'ignore' instructions for the interpolated product data.\n
- Capability inventory: The agent has capabilities to write files to the local project directory and execute shell commands via the provided scripts.\n
- Sanitization: Data is parsed via standard JSON libraries, but no secondary validation or sanitization of the natural language fields is performed before output.
Audit Metadata