linkfox-shopee-store-shop-flash-sale
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/_shopee_shop_flash_sale_common.pyusessubprocess.runto execute a sibling script,scripts/check_auth_dependency.py. This is a controlled internal check to ensure thelinkfox-shopee-store-authskill is available. - [DATA_EXFILTRATION]: The skill performs network operations to
tool-gateway.linkfox.com,api.linkfox.com, andagent-api.linkfox.com. These are official vendor domains forlinkfox-aiused to proxy Shopee API calls and manage user accounts. No exfiltration to unauthorized domains was found. - [CREDENTIALS_UNSAFE]: Authentication is managed via the
LINKFOX_AGENT_API_KEYenvironment variable. Thescripts/onboarding.pyfile provides a legitimate user workflow for generating and setting this key, adhering to secure credential management practices. - [DATA_EXPOSURE]: API responses are written to a
linkfox/directory within the current working directory for session persistence. The skill correctly avoids shared temporary directories and provides summaries to the agent to minimize context pollution.
Audit Metadata