The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The skill's onboarding process, specifically within scripts/onboarding.py and references/onboarding.md, encourages the collection of the user's phone number to facilitate SMS-based registration and login for the LinkFox service.
[PERSISTENCE_MECHANISMS]: The references/onboarding.md file contains instructions for the AI agent to guide the user in modifying their system's environment. It explicitly suggests appending configuration to shell profile files such as ~/.zshrc and ~/.bashrc, or using setx on Windows to ensure the LINKFOX_AGENT_API_KEY persists across sessions.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted product data from Shopify and writes the full responses to the local file system in the linkfox/ directory.
Ingestion points: External data enters through ehunt/shopify/productQuery API calls in scripts/shopify_product_query.py.
Boundary markers: No boundary markers or 'ignore' instructions are used when handling the product titles, descriptions, or store information.
Capability inventory: The skill performs file writes to the local disk and is used in contexts where an agent might later read and process these files.
Sanitization: There is no evidence of sanitization or filtering of the content returned from the external Shopify API before storage or display.
[EXTERNAL_DOWNLOADS]: The scripts/onboarding.py script requires external Python packages (requests, qrcode, pillow) and instructs the agent or user to install them if missing, which introduces third-party code into the execution environment.

linkfox-shopify-product-query