The Agent Skills Directory

[PERSISTENCE]: The skill's onboarding documentation (references/onboarding.md) instructs users to add environment variable exports to shell profile files such as ~/.zshrc and ~/.bashrc. This is a standard configuration practice to ensure the LINKFOX_AGENT_API_KEY is available across sessions, but it is technically a persistence mechanism.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external marketplace data, which presents a surface for potential injection if the source data is maliciously crafted.
Ingestion points: Data is retrieved from the MPSTATS API via the tool-gateway.linkfox.com endpoint in scripts/mpstats_ozon_product_trend.py.
Boundary markers: None identified in the script's output logic; data is parsed as JSON and either summarized or printed in full.
Capability inventory: The skill has the ability to execute shell commands, perform network requests to vendor APIs, and write JSON files to the local project directory.
Sanitization: The script does not implement explicit sanitization of strings returned by the marketplace API before presenting them to the agent.
[COMMAND_EXECUTION]: The skill relies on the execution of local Python scripts to manage data retrieval and user authentication flows.
[EXTERNAL_DOWNLOADS]: The scripts/onboarding.py utility and associated documentation recommend the installation of standard third-party libraries (requests, qrcode, pillow) to support HTTP communication and QR code generation for payment processing.

linkfox-mpstats-ozon-product-trend