linkfox-sellersprite-market-statistics
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill's onboarding documentation (references/onboarding.md) instructs the agent to assist the user in adding the LINKFOX_AGENT_API_KEY to shell configuration files such as ~/.zshrc and ~/.bashrc. This serves as a persistence mechanism for environment variables across sessions.\n- [INDIRECT_PROMPT_INJECTION]: The script scripts/sellersprite_market_statistics.py fetches market data from an external API (tool-gateway.linkfox.com) and displays summaries in the agent's context. The absence of explicit boundary markers or sanitization for this untrusted data creates a potential surface for indirect prompt injection. Mandatory Evidence Chain: (1) Ingestion point: scripts/sellersprite_market_statistics.py calling external API. (2) Boundary markers: Absent. (3) Capability inventory: Subprocess calls via Python, file writing, and network operations. (4) Sanitization: Absent.\n- [COMMAND_EXECUTION]: The skill relies on executing Python scripts (scripts/sellersprite_market_statistics.py and scripts/onboarding.py) to perform its core functions, which include making network requests and managing a local data cache within the project directory.
Audit Metadata