The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends the optional installation of standard Python packages, specifically requests, qrcode, and pillow, to support its account onboarding and QR code rendering features. These libraries are expected for the skill's functionality and are sourced from standard package registries.
[DATA_EXFILTRATION]: The skill communicates exclusively with domains owned by the vendor (linkfox.com), including the API gateway (tool-gateway.linkfox.com) and authentication services (api.linkfox.com, agent-api.linkfox.com). It manages shop-specific credentials by storing Temu access tokens in a local hidden file (~/.linkfox/temu-access-tokens.json) and utilizing LinkFox API keys from environment variables. These operations are part of the skill's standard shop management workflow.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the Temu platform through the LinkFox gateway.
Ingestion points: API responses are retrieved in scripts/_temu_common.py using urllib.request.urlopen.
Boundary markers: The data is handled as structured JSON, providing clear delimiters.
Capability inventory: The skill has the capability to write results to the local filesystem and perform network operations to vendor-specific domains.
Sanitization: Incoming API data is parsed using the standard json.loads library before being summarized or stored, reducing the risk of malicious instructions being interpreted as commands.

linkfox-temu-fulfillment-global