linkfox-shopee-store-voucher
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The shared module
_shopee_voucher_common.pyutilizessubprocess.runto execute an internal script,check_auth_dependency.py. This call ensures that the mandatory authentication skill is present in the environment before proceeding with voucher operations. - [DATA_EXFILTRATION]: The
onboarding.pyscript manages the authentication flow by sending user-provided phone numbers and verification codes to the vendor's official login service (api.linkfox.com). This is a legitimate part of the account setup process to acquire the necessary API keys. - [EXTERNAL_DOWNLOADS]: The skill interacts with several vendor-owned domains, including
tool-gateway.linkfox.comfor API proxying andagent-api.linkfox.comfor account and billing management. It also references official Shopee Open Platform documentation for API specifications. - [COMMAND_EXECUTION]: The onboarding process provides platform-specific commands for Windows, macOS, and Linux to help users persistently store their API keys in environment variables.
Audit Metadata