The Agent Skills Directory

[COMMAND_EXECUTION]: The script _shopee_bundle_deal_common.py uses subprocess.run to execute a secondary local script (check_auth_dependency.py) to verify the presence of required authentication skills. This execution is limited to a specific file within the skill's own directory.
[EXTERNAL_DOWNLOADS]: The skill communicates with vendor-owned domains (tool-gateway.linkfox.com, api.linkfox.com, and agent-api.linkfox.com) for API proxying, user authentication, and plan management. These endpoints are consistent with the skill's stated purpose and author (linkfox-ai).
[PERSISTENCE]: The references/onboarding.md file provides instructions for users to manually add environment variables to their shell profiles (e.g., .bashrc, .zshrc) or via setx on Windows. While this modifies shell configuration, it is a standard, user-directed practice for persisting CLI tool configuration.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Shopee APIs and saves it to local JSON files. If these files are later read by the agent, they could theoretically contain malicious instructions embedded in product metadata, though this risk is inherent to all tools processing external e-commerce data.

linkfox-shopee-store-bundle-deal