linkfox-shopify-product-query

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The URL list includes a direct download link to a ZIP archive (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip) hosted on a project file-hosting subdomain which is a high-risk distribution pattern for executables/skins and can be used to deliver malware if not validated.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required workflow calls an external gateway API and then prints/serializes the gateway’s JSON response (including free-text fields like product titles/links/error messages) into stdout, which is then available to the agent/LLM context—this is outsider-authored content from a public/third-party service response.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). SKILL.md instructs the agent at runtime to download and install remote skill code from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip, which fetches and installs executable content that can control agent behavior.