linkfox-shopify-store-query

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL points to a direct downloadable archive (release.zip) with instructions to extract and “install this skill,” which is a typical vector for delivering unvetted executable code and should be treated as suspicious unless the package and publisher are verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 该技能在运行时会调用外部网关接口 POST /ehunt/shopify/storeQuery 并把返回的 JSON（包含自由文本字段如店铺名/域名/链接等）通过脚本的 print(serialized) 或 summarize() 进入当前 LLM/代理上下文；同时 SKILL.md 还允许在找不到 onboarding.md 时从外部 URL 下载并安装 linkfox-onboarding（其内容可能被后续读取）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs runtime download-and-install of a remote skill package that would supply code/instructions (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip), which means remote content fetched at runtime can control agent behavior or execute code.