The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run within scripts/_shopee_media_common.py to execute a local dependency checker script (scripts/check_auth_dependency.py). This is an internal operation intended to verify that the required authentication skill is installed in the environment.\n- [DATA_EXFILTRATION]: The skill uses the LINKFOX_AGENT_API_KEY to authenticate with LinkFox's developer proxy and account APIs. This is standard functionality for the skill to communicate with the vendor's infrastructure and perform Shopee API operations.\n- [DATA_EXPOSURE]: Full API responses from Shopee are logged to a linkfox/ directory within the local workspace for auditing and debugging. This logging behavior is explicitly described in the SKILL.md and adheres to workspace-relative storage practices.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Shopee and LinkFox APIs. The ingestion surface is managed by structured JSON parsing and a summarization strategy that prevents large, untrusted payloads from directly entering the LLM context. Evidence Chain:\n
Ingestion points: API responses fetched in scripts/_shopee_media_common.py and scripts/onboarding.py.\n
Boundary markers: Uses json.loads and specific response key extraction to isolate data.\n
Capability inventory: Subprocess execution for dependency checks, network operations for API access, and file-writing for logs.\n
Sanitization: Structured data summaries are used for responses exceeding 8KB to limit raw data exposure.\n- [EXTERNAL_DOWNLOADS]: The scripts/onboarding.py script and references/onboarding.md guide the user to manually install common Python dependencies (requests, qrcode, pillow) if they are missing from the system.

linkfox-shopee-store-media