linkfox-temu-manage-product-eu
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill contains numerous Python scripts designed to be executed by the agent to interact with Temu's Partner EU platform APIs. These scripts perform actions like querying goods, updating stock, and managing compliance information.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Temu APIs and stores the results in the workspace. This data, which may include seller-controlled content such as product descriptions, represents a potential injection surface if processed directly by the agent.\n
- Ingestion points: API responses from
tool-gateway.linkfox.comare saved to local JSON files by theemit_resultfunction inscripts/_temu_common.py.\n - Boundary markers: The skill instructions specifically advise the agent to use
jqorConvertFrom-Jsonto extract relevant fields, minimizing the exposure to potentially malicious content in the prompt context.\n - Capability inventory: The skill possesses the ability to execute shell commands and perform network requests.\n
- Sanitization: The scripts do not perform explicit sanitization of the data retrieved from the API before storage.\n- [EXTERNAL_DOWNLOADS]: The
onboarding.pyutility references the installation of standard Python packagesrequests,qrcode, andpillowfrom the official PyPI registry to support account management and QR code generation.
Audit Metadata