linkfox-seerfar-ozon-keyword-mining
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes keyword and product data from external marketplaces which could potentially contain malicious or adversarial content.
- Ingestion points: External data fields such as
queryand producttitleare retrieved via the API and processed inseerfar_ozon_keyword_mining.py. - Boundary markers: The skill does not implement specific delimiters or instructions to ignore embedded prompts in the data it processes.
- Capability inventory: The skill has capabilities to write to the local filesystem and perform network operations via the
seerfar_ozon_keyword_mining.pyandonboarding.pyscripts. - Sanitization: No explicit sanitization or filtering is performed on the marketplace content before it is displayed to the user or saved to the disk.
- [EXTERNAL_DOWNLOADS]: The skill interacts with several domains associated with the vendor for operational purposes.
- The
onboarding.pyscript makes network requests toapi.linkfox.comandagent-api.linkfox.comfor authentication and account management. - The
seerfar_ozon_keyword_mining.pyscript communicates withtool-gateway.linkfox.comto fetch keyword mining data. - [COMMAND_EXECUTION]: Documentation provides guidance for users to manually configure their environment to persist credentials.
- The
onboarding.mdfile contains instructions for users to usesetxon Windows or shell redirection (>>) on macOS and Linux to save the API key into shell profile files such as.zshrcor.bashrc.
Audit Metadata