The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill communicates with vendor-controlled domains including tool-gateway.linkfox.com, api.linkfox.com, and agent-api.linkfox.com to fetch keyword data and handle user authentication. These operations are consistent with the skill's primary purpose.
[COMMAND_EXECUTION]: The skill utilizes local Python scripts (sif_asin_keywords.py and onboarding.py) to execute API requests and manage credential onboarding, which is expected behavior for its functionality.
[INDIRECT_PROMPT_INJECTION]: The skill processes keyword data sourced from the Amazon marketplace via the SIF API. This data is external and untrusted, representing a potential ingestion surface, but the risk is managed and inherent to the tool's operation.
Ingestion points: Data returned from the asinKeywords API endpoint in scripts/sif_asin_keywords.py.
Boundary markers: None explicitly enforced for the raw keyword strings displayed to the user.
Capability inventory: The skill writes query results and metadata to the local linkfox/ directory but lacks high-risk capabilities like arbitrary shell execution or remote code loading.
Sanitization: No specific sanitization of keyword strings is noted before they are formatted into results.

linkfox-sif-asin-keywords