linkfox-sif-keyword-summary

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The list includes a direct download of an installer archive (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip …) — distributing executable archives is a high-risk pattern that requires explicit user consent and scrutiny; the other links are API/docs and look benign.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow calls an external API and then prints/summarizes the API’s JSON response (including free-text fields like msg/errmsg and product titles) into the agent’s LLM context via stdout, which is outsider-authored content from the runtime API response.