The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/_shopee_orders_common.py utilizes subprocess.run to execute an internal Python script (check_auth_dependency.py) to verify that the required authentication skill is present in the environment.
[PERSISTENCE_MECHANISMS]: The references/onboarding.md documentation provides explicit instructions for the agent to guide the user in modifying shell configuration files (such as ~/.zshrc and ~/.bashrc) to persist the LINKFOX_AGENT_API_KEY across sessions.
[EXTERNAL_DOWNLOADS]: The scripts/onboarding.py tool checks for the presence of external libraries (requests, qrcode, pillow) and provides the user with pip install commands if they are missing. It also communicates with vendor-controlled domains (linkfox.com) for authentication and billing services.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill automatically saves full API responses from Shopee—which may contains sensitive order and customer information—to local JSON files within a linkfox/ directory in the current workspace. This is designed to optimize agent context usage but results in plain-text storage of business data.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from the external Shopee Open API. While it implements a summarization strategy to handle large payloads, there are no explicit boundary markers or sanitization routines to prevent the agent from potentially following instructions embedded within order data.

linkfox-shopee-store-orders