The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/_shopee_logistics_common.py uses subprocess.run to execute a local dependency checker scripts/check_auth_dependency.py. This is used to ensure the required authentication skill is present in the environment.
[PERSISTENCE]: The documentation file references/onboarding.md provides instructions for users to manually add the LINKFOX_AGENT_API_KEY environment variable to shell configuration files such as ~/.bashrc and ~/.zshrc to ensure the key persists across sessions.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from the external Shopee Open API and writes the raw responses to local JSON files in the project directory. While this data is summarized before being presented to the agent, the ingestion of untrusted external content represents a potential indirect injection surface.
Ingestion points: Data is fetched via urllib.request in scripts/_shopee_logistics_common.py from the Shopee developer proxy.
Boundary markers: None identified in the processing of external API responses.
Capability inventory: The skill has the ability to write to the local file system and perform network operations to vendor-controlled domains.
Sanitization: The skill provides a summary of large JSON objects but does not explicitly sanitize the content of the Shopee API responses.
[EXTERNAL_DOWNLOADS]: The scripts/onboarding.py script suggests the installation of third-party Python packages (requests, qrcode, pillow) if they are missing, which are required for the onboarding and payment functionality.

linkfox-shopee-store-logistics