linkfox-shopee-store-public
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runin_shopee_public_common.pyto callcheck_auth_dependency.py. This operation is used to verify that thelinkfox-shopee-store-authskill is installed on the local system before attempting to call Shopee APIs. The execution is confined to the skill's own local scripts. - [EXTERNAL_DOWNLOADS]: The scripts communicate with vendor-owned domains, including
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.com. These requests facilitate the developer proxy for Shopee API access, user authentication via SMS, and account subscription management, all of which are primary functions of the skill. - [DATA_EXPOSURE]: The dependency checking script (
check_auth_dependency.py) scans common AI agent and IDE installation paths (such as.claude/skills,.cursor/skills, and various OpenClaw directories) to locate thelinkfox-shopee-store-authskill. This is a local file system search for dependency resolution and does not exfiltrate data.
Audit Metadata