linkfox-sorftime-amazon-product-query
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download an onboarding package from the vendor's domain (
https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip) in case of authentication or credit issues. The instructions mandate that the agent must request user authorization before initiating the download. - [COMMAND_EXECUTION]: Executes a local script
scripts/sorftime_product_search.pywhich performs network requests and manages local data caching. The script uses standard Python libraries for HTTP communication and file system operations. - [DATA_EXFILTRATION]: Uses environment variables for API authentication (
LINKFOX_AGENT_API_KEY) and session tracking (SESSION_ID,MODE_ID,APP_NAME). This information is sent to the vendor's API gateway (tool-gateway.linkfox.com) and feedback service (skill-api.linkfox.com) to fulfill user requests. - [DATA_EXFILTRATION]: Automatically writes full API response data, session metadata, and index files to the local project directory under a
linkfox/subfolder. This behavior is documented as a way to provide persistent access to search results for the user.
Audit Metadata