linkfox-shopee-store-top-picks
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
_shopee_top_picks_common.pyutilizessubprocess.runto execute a local dependency checker,check_auth_dependency.py. This operation is restricted to the skill's own directory and is used solely to verify the presence of required authentication components. - [DATA_EXFILTRATION]: Network activity is conducted via
urllibandrequeststargetinglinkfox.comand its subdomains. These endpoints are owned by the skill's author (linkfox-ai) and are used for intended proxying and account management functions. - [CREDENTIALS_UNSAFE]: The skill correctly handles authentication by accessing the
LINKFOX_AGENT_API_KEYenvironment variable. A hardcoded Base64 string inonboarding.pyis used as a static identifier for the login service and does not contain sensitive user credentials.
Audit Metadata