The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/_shopee_shop_category_common.py to execute a local dependency checker script (check_auth_dependency.py). The script path is programmatically resolved relative to the current file, ensuring only the intended internal script is executed.- [EXTERNAL_DOWNLOADS]: The skill communicates with LinkFox vendor domains (tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com) for API proxying, user authentication, and billing services. These interactions trace back to the verified vendor's infrastructure.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external Shopee API responses. While this presents an ingestion surface, the risk is mitigated by the following:
Ingestion points: API response bodies received through developer_proxy_call in scripts/_shopee_shop_category_common.py.
Boundary markers: Data is processed and stored as structured JSON, though specific natural language delimiters are not used during subsequent interpolation.
Capability inventory: The skill has capabilities for local script execution (dependency checker) and writing log files to the project directory.
Sanitization: API data is strictly parsed and validated via json.loads before being processed or logged.- [PERSISTENCE]: The documentation in references/onboarding.md provides instructions for users to manually persist their API keys in shell configuration files (.bashrc, .zshrc). This is an intended setup step for the vendor's toolset and is not executed automatically by the skill.

linkfox-shopee-store-shop-category