linkfox-ruiguan-trademark-graphic-detection
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The script
scripts/upload_image.pytransmits local image files to the vendor's infrastructure attool-gateway.linkfox.com. This is the core functionality required to generate public URLs for trademark analysis. - [COMMAND_EXECUTION]: The skill requires the execution of several local Python scripts (
scripts/ruiguan_trademark_graphic_detection.py,scripts/upload_image.py, andscripts/onboarding.py) to perform detection tasks and manage authentication. - [EXTERNAL_DOWNLOADS]: Documentation within
scripts/onboarding.pysuggests the installation of well-known and standard Python libraries (requests,qrcode,pillow) via the officialpippackage manager if they are not already present. - [PROMPT_INJECTION]: The skill ingests external data from image URLs and product titles provided by the user. While this creates a surface for indirect prompt injection via tool outputs, the data is processed through vendor APIs and handled using standard agent communication patterns.
Audit Metadata