linkfox-shopee-store-logistics

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local script check_auth_dependency.py via subprocess.run in _shopee_logistics_common.py. This execution is used to verify that required authentication skills are present and is safe as it targets a static local file and does not involve shell injection.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to tool-gateway.linkfox.com and api.linkfox.com to proxy Shopee API requests and facilitate account management. These domains are verified and owned by the author (linkfox-ai).
  • [SAFE]: Credential management adheres to security best practices by retrieving API keys from environment variables (LINKFOX_AGENT_API_KEY). The provided onboarding documentation guides users through manual configuration without requiring high privileges.
  • [SAFE]: No evidence of prompt injection, obfuscation, or malicious persistence mechanisms was found during the analysis of the skill's instructions and supporting scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:03 AM
Security Audit — agent-trust-hub — linkfox-shopee-store-logistics