linkfox-temu-category-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests category data from an external Temu API which could contain instructions intended to influence the agent's behavior.\n
- Ingestion points: The
call_apifunction inscripts/temu_category_search.pyretrieves data from the vendor's API gateway.\n - Boundary markers: There are no explicit markers or instructions to the agent to disregard instructions potentially embedded within the category strings.\n
- Capability inventory: The skill includes scripts capable of local file system writes and network communication for account management.\n
- Sanitization: The skill does not demonstrate filtering of the category data before presenting it to the agent.\n- [PERSISTENCE]: The skill's onboarding documentation in
references/onboarding.mdinstructs the agent to help users persistently store their API key by modifying shell startup files like~/.bashrcand~/.zshrc.
Audit Metadata