linkfox-shopee-store-product
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Communicates with the vendor's backend services at
linkfox.comandlinkfox-ai.comdomains to proxy Shopee API requests and manage account onboarding, including license and credit management. - [COMMAND_EXECUTION]: Uses
subprocess.runin_shopee_product_common.pyto execute a local dependency checker script (check_auth_dependency.py) to ensure prerequisite skills are installed. - [DATA_EXFILTRATION]: Transmits Shopee API parameters and shop identifiers to the vendor's gateway for processing. This behavior is documented and essential for the skill's primary function as an API proxy.
- [DATA_EXPOSURE]: Accesses the
LINKFOX_AGENT_API_KEYenvironment variable for authentication and writes full API responses to alinkfoxdirectory within the user's workspace for debugging and data persistence. - [INDIRECT_PROMPT_INJECTION]: Processes external content retrieved from the Shopee API. The skill includes logic to summarize large responses (over 8KB) before printing them to the standard output, which helps mitigate potential prompt injection or context overflow from untrusted external data.
Audit Metadata