linkfox-shopee-store-shop
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes subprocess.run within the _shopee_shop_common.py module to execute a local Python script (check_auth_dependency.py). This operation is used to verify the presence of required peer skills in the local environment.
- [EXTERNAL_DOWNLOADS]: Instructions within the onboarding.py utility and associated documentation advise the user to install well-known Python packages including requests, qrcode, and pillow to support account registration and payment processing features.
- [DATA_EXFILTRATION]: The skill transmits shop management data and account credentials to vendor-controlled domains (e.g., tool-gateway.linkfox.com, api.linkfox.com). This is the intended functional behavior for a skill acting as an API proxy for Shopee services.
- [SAFE]: The skill provides clear guidance for the manual configuration of API keys within the user's shell profile files (.bashrc or .zshrc), which is a standard and transparent practice for credential persistence in command-line environments.
Audit Metadata