linkfox-seerfar-ozon-keyword-back-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The agent-files.linkfox.com entry is a direct download of release.zip and the skill explicitly instructs installing it (an archive used to distribute executable components), which is a potential malware distribution vector unless the archive and publisher are independently verified and the user explicitly consents.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text is ingested from the API response body (e.g., data[*].query / queryCn keyword strings returned by the Seerfar/Ozon backend) and then printed/summarized into the agent’s runtime LLM context via stdout (full JSON when --inline or small response; otherwise the “Sample” JSON printed by summarize).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime recovery instructions explicitly tell the agent to download and install a remote skill archive (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip), which would fetch and install remote code at runtime and thus can directly control agent behavior.