linkfox-temu-ads-eu
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes multiple Python scripts that allow the agent to perform administrative tasks on Temu Ads, such as creating campaigns, querying logs, and generating reports.
- [CREDENTIALS_UNSAFE]: The
_temu_token_store.pyscript manages the local storage of Temu access tokens in the~/.linkfox/temu-access-tokens.jsonfile. This is an intended mechanism for preserving session authentication within the user's local environment. - [DATA_EXFILTRATION]: Network operations in
scripts/_temu_common.pyandscripts/onboarding.pytarget vendor-controlled subdomains oflinkfox.comand officialtemu.comendpoints. These communications are required for core functions such as gateway proxying and account onboarding. - [PROMPT_INJECTION]: The skill processes external data from the Temu API, which presents a surface for indirect prompt injection.
- Ingestion points: External data is ingested via the
call_temu_apifunction inscripts/_temu_common.py. - Boundary markers: There are no explicit delimiters or safety instructions used to isolate API response data from the agent's instructions.
- Capability inventory: The agent has the ability to modify ad campaigns and budgets via scripts like
eu_ads_searchrec_ad_modify.py. - Sanitization: Response data is printed to the console using
emit_resultwithout specific filtering for malicious instruction patterns.
Audit Metadata