The Agent Skills Directory

[SAFE]: The skill is a legitimate extension for Shopee store management developed by LinkFox AI. No security issues were detected.\n- [COMMAND_EXECUTION]: The script _shopee_media_space_common.py uses subprocess.run to execute check_auth_dependency.py. The execution is restricted to the local file system path and uses the current Python interpreter, which is a standard practice for modular dependency checks.\n- [EXTERNAL_DOWNLOADS]: The onboarding.py script checks for the presence of the requests, qrcode, and pillow Python packages. If missing, it provides instructions for the user to install them via pip from the official Python Package Index (PyPI). No automatic or silent remote code execution was found.\n- [DATA_EXFILTRATION]: All network requests are made to the vendor's official and documented API gateways, such as tool-gateway.linkfox.com and api.linkfox.com. These calls are necessary for the skill's functionality, such as Shopee API proxying, user authentication, and media uploads.\n- [INDIRECT_PROMPT_INJECTION]: The skill accepts file paths as input to upload media. While this constitutes a data ingestion surface, the skill does not execute content within those files as code or instructions, and the impact is limited to the skill's specific Shopee upload functions.

linkfox-shopee-store-media-space