linkfox-temu-fulfillment-us
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a collection of Python scripts to interface with the Temu US platform via the LinkFox tool gateway. These scripts are thin wrappers designed to provide the agent with structured access to fulfillment, tracking, and logistics services.
- [EXTERNAL_DOWNLOADS]: The
onboarding.pyutility suggests installing well-known and trusted Python libraries (requests,qrcode,pillow) from standard registries to facilitate the user login process and display QR codes for payment. - [DATA_EXPOSURE]: Temu access tokens are managed locally and stored in a configuration file within the user's home directory (
~/.linkfox/temu-access-tokens.json). This follows standard conventions for CLI-based authentication persistence. - [DATA_EXFILTRATION]: The skill communicates with vendor-owned domains (
linkfox.comand its subdomains) to proxy requests to Temu. This is the core intended functionality of the skill and aligns with the service provided by the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Temu API responses. To mitigate potential prompt injection from these untrusted sources, the instructions explicitly recommend using data extraction tools like
jqto parse specific fields rather than injecting raw JSON payloads into the agent's active context.
Audit Metadata