linkfox-seerfar-ozon-category-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to vendor-controlled domains including
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.comto fetch analytics data and handle user authentication flows. These network operations are consistent with the skill's stated purpose. - [COMMAND_EXECUTION]: The skill employs Python scripts (
seerfar_ozon_category_search.pyandonboarding.py) to execute its core logic. These scripts are intended to be invoked by the agent to interact with the marketplace API and assist the user with API key configuration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests product titles and descriptions from the Ozon marketplace via the Seerfar API. This untrusted data represents a potential attack surface if it contains instructions designed to influence the agent's behavior.
- Ingestion points: External data is retrieved from the
/seerfar/ozon/categorySearchendpoint inscripts/seerfar_ozon_category_search.py. - Boundary markers: There are no explicit delimiters or boundary markers used in the instructions to separate external data from agent commands.
- Capability inventory: The skill possesses capabilities for network access (via
urllibandrequests) and local file writing (to thelinkfox/directory). - Sanitization: The skill outputs raw product data to the console and files without specialized sanitization to prevent the interpretation of embedded instructions.
Audit Metadata