linkfox-shopee-store-add-on-deal
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates interaction with the Shopee Open API via the vendor's official developer proxy (tool-gateway.linkfox.com). All network activity and data processing are consistent with the skill's stated purpose of e-commerce management.
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinscripts/_shopee_add_on_deal_common.pyto execute a local verification script (scripts/check_auth_dependency.py). This is a restricted, non-shell execution of a bundled script used solely for verifying environment prerequisites. - [SAFE]: Sensitive data such as API keys are managed through environment variables (
LINKFOX_AGENT_API_KEY), adhering to recommended security practices for AI agent configurations. - [EXTERNAL_DOWNLOADS]: The onboarding utility (
scripts/onboarding.py) fetches QR codes and facilitates account management via the vendor's subdomains. These operations are restricted to the vendor's domain space and are necessary for the skill's functional lifecycle.
Audit Metadata