Skills
Navigate
skills/linkfox-ai/linkfox-skills/linkfox-shopee-store-first-mile/Gen Agent Trust Hub

linkfox-shopee-store-first-mile

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The shared utility script _shopee_first_mile_common.py executes a local dependency check script (scripts/check_auth_dependency.py) using subprocess.run. This is used to verify the presence of required peer skills by searching common skill installation directories.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to official LinkFox API domains (tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com) for proxying Shopee API calls and managing user accounts. These are vendor-controlled resources necessary for the skill's primary function.
  • [PROMPT_INJECTION]: The skill ingests data from external Shopee API responses and presents summaries or raw JSON to the agent. While this represents a potential surface for indirect prompt injection if the remote data is malicious, the skill uses standard JSON serialization and provides data summaries to mitigate risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:03 AM
Security Audit — agent-trust-hub — linkfox-shopee-store-first-mile