linkfox-shopee-store-media
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runwithinscripts/_shopee_media_common.pyto execute a local script,scripts/check_auth_dependency.py. This is used to verify the presence of the required authentication skill and does not execute arbitrary shell commands. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.comusing Python'surllibandrequestslibraries. These endpoints are used for API proxying, user authentication, and billing management, which are consistent with the skill's stated purpose and authored by the same vendor. - [COMMAND_EXECUTION]: The
scripts/onboarding.pyscript andreferences/onboarding.mddocumentation provide commands for users to set environment variables in their shell profiles (e.g.,~/.zshrc,~/.bashrc). This is a legitimate configuration mechanism for persisting the required API key for the service.
Audit Metadata