linkfox-shopee-store-payment
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/_shopee_payment_common.pyusessubprocess.runto execute a local sibling script,scripts/check_auth_dependency.py. This is used for internal dependency verification and does not execute untrusted external commands. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to vendor-owned domains (
tool-gateway.linkfox.com,api.linkfox.com,agent-api.linkfox.com) and the Shopee Open Platform (open.shopee.com). These connections are necessary for the skill's core functionality, including API proxying, user authentication, and documentation retrieval. - [INDIRECT_PROMPT_INJECTION]: The skill processes store payment data and user-provided parameters. While it handles external data, it uses structured JSON processing and does not interpolate untrusted content into prompt instructions, mitigating the risk of injection attacks.
- [DATA_EXFILTRATION]: The skill transmits store identifiers and API request parameters to the vendor's proxy gateway (
tool-gateway.linkfox.com). This is documented behavior required to facilitate the Shopee API integration without requiring the agent to manage complex Shopee authentication tokens directly.
Audit Metadata