linkfox-seerfar-ozon-shop-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires external Python dependencies for some functionality.
scripts/onboarding.pydepends onrequestsandqrcode(withpillowfor image generation).- The script provides instructions for the user to install these packages if they are not present in the environment.
- [COMMAND_EXECUTION]: The skill involves the execution of local Python scripts to interact with vendor services.
scripts/seerfar_ozon_shop_search.pyperforms the primary shop data retrieval.scripts/onboarding.pymanages the user authentication and billing lifecycle.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external e-commerce API, creating a potential surface for indirect prompt injection.
- Ingestion points: Product and shop data is retrieved from
tool-gateway.linkfox.comviascripts/seerfar_ozon_shop_search.py. - Boundary markers: There are no explicit instructions or delimiters used when presenting the API data to the agent to prevent the interpretation of malicious content within the data fields.
- Capability inventory: The skill is capable of writing data to the local filesystem and making network requests to vendor-owned API endpoints.
- Sanitization: The skill does not perform validation or sanitization of the strings returned by the external API before including them in the agent's context.
Audit Metadata