linkfox-seerfar-ozon-shop-search

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires external Python dependencies for some functionality.
  • scripts/onboarding.py depends on requests and qrcode (with pillow for image generation).
  • The script provides instructions for the user to install these packages if they are not present in the environment.
  • [COMMAND_EXECUTION]: The skill involves the execution of local Python scripts to interact with vendor services.
  • scripts/seerfar_ozon_shop_search.py performs the primary shop data retrieval.
  • scripts/onboarding.py manages the user authentication and billing lifecycle.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external e-commerce API, creating a potential surface for indirect prompt injection.
  • Ingestion points: Product and shop data is retrieved from tool-gateway.linkfox.com via scripts/seerfar_ozon_shop_search.py.
  • Boundary markers: There are no explicit instructions or delimiters used when presenting the API data to the agent to prevent the interpretation of malicious content within the data fields.
  • Capability inventory: The skill is capable of writing data to the local filesystem and making network requests to vendor-owned API endpoints.
  • Sanitization: The skill does not perform validation or sanitization of the strings returned by the external API before including them in the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:11 AM