linkfox-shopee-store-global-product

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script _shopee_global_product_common.py utilizes subprocess.run to execute check_auth_dependency.py. This is used to verify the presence of the required linkfox-shopee-store-auth skill within the environment before proceeding with API calls.
  • [EXTERNAL_DOWNLOADS]: The onboarding.py script contains logic that may prompt the user to manually install standard Python libraries such as requests, qrcode, and pillow via pip if they are not already available. These are used for handling HTTP requests and rendering payment QR codes.
  • [DATA_EXFILTRATION]: The skill performs network requests to subdomains of linkfox.com (e.g., tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com) to proxy Shopee API requests and facilitate user login/onboarding. These endpoints are vendor-owned resources used for the skill's primary functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:02 AM
Security Audit — agent-trust-hub — linkfox-shopee-store-global-product