linkfox-seerfar-ozon-product-report-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are legitimate LinkFox or Ozon endpoints, but the agent-files.linkfox.com entry points to a direct downloadable release.zip (archive to be installed) which is a common vector for distributing malware and should be treated as suspicious until its provenance and contents are verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text is ingested via the runtime HTTP response body from the Seerfar/Ozon productReportSearch API (e.g., product title, brandName, sellerName, category path strings), which the script then prints/summarizes and can store for later LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs at runtime to download and install remote code from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip (download + extract + install), which fetches and would install executable skill code.