The Agent Skills Directory

[SAFE]: The skill's primary purpose is Shopee store management and authorization. Its implementation is consistent with its stated functionality and utilizes the vendor's established API infrastructure.
[COMMAND_EXECUTION]: The authorize_url.py script employs subprocess.run to interact with system clipboard utilities (such as clip.exe, pbcopy, xclip, etc.). This feature allows users to easily copy the generated authorization URL. The implementation uses safe argument passing (list-based) and avoids shell execution, preventing command injection.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data from Shopee APIs, such as store names and IDs. While this represents a data ingestion surface, the risk of indirect prompt injection is minimal because the skill only uses this data for display and metadata management, and does not use it to construct executable commands or influence critical logic.
[DATA_EXFILTRATION]: All network communication is directed to the vendor's official domains (linkfox.com, linkfox-ai.com) for authentication, authorization, and billing purposes. This is expected and legitimate behavior for a skill developed by linkfox-ai to manage access to its services.

linkfox-shopee-store-auth