linkfox-shopee-store-fbs

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script _shopee_fbs_common.py uses subprocess.run to execute a local helper script, check_auth_dependency.py, which verifies that the required authentication skill is installed. This is a benign use of command execution for dependency management.
  • [EXTERNAL_DOWNLOADS]: The onboarding.py script identifies missing dependencies (qrcode, pillow, requests) and recommends installing them via standard package managers. These are well-known libraries from the official Python Package Index (PyPI).
  • [DATA_EXPOSURE]: The skill routes its Shopee API requests through vendor-controlled endpoints (e.g., tool-gateway.linkfox.com). This is a standard proxy architecture for specialized AI agent skills to handle complex authentication and rate-limiting. User credentials (API keys) are managed securely through environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:02 AM
Security Audit — agent-trust-hub — linkfox-shopee-store-fbs