linkfox-sif-keyword-overview
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses, which theoretically presents an attack surface for instructions embedded in marketplace data.
- Ingestion points: API response data processed in
scripts/sif_keyword_overview.py. - Boundary markers: Not explicitly implemented in the scripts.
- Capability inventory: File system writing and network operations are present in
scripts/sif_keyword_overview.pyandscripts/onboarding.py. - Sanitization: Data is handled as structured JSON, reducing the risk of accidental execution.
- [EXTERNAL_DOWNLOADS]: The
scripts/onboarding.pyscript and documentation mention third-party Python dependencies (requests,qrcode,pillow) required for the authentication and QR code generation features. - [COMMAND_EXECUTION]: The skill relies on executing specific Python scripts (
scripts/sif_keyword_overview.pyandscripts/onboarding.py) and provides instructions for the agent to guide users in configuring shell environment variables.
Audit Metadata