linkfox-shopee-store-sbs
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/_shopee_sbs_common.pyusessubprocess.runto execute a local dependency verification script,scripts/check_auth_dependency.py. This execution is performed using the current Python interpreter (sys.executable) without a shell, ensuring the call is constrained to the local environment for functional validation. - [EXTERNAL_DOWNLOADS]: The skill interacts with LinkFox's official infrastructure via
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.comto process Shopee API requests and manage user authentication/billing. Additionally, thescripts/onboarding.pyutility provides instructions for the user to install standard Python libraries (requests,qrcode, andpillow) if they are missing, which is a common requirement for the vendor's login and QR-based payment features. - [CREDENTIALS_UNSAFE]: Authentication is managed through environment variables (
LINKFOX_AGENT_API_KEY), which is a standard and secure practice for providing API access to agents. The onboarding script allows users to securely obtain their own keys via a verified SMS login process through the vendor's portal, avoiding the use of hardcoded secrets or insecure credential storage.
Audit Metadata