The Agent Skills Directory

[DATA_EXFILTRATION]: The skill processes and stores sensitive information. Temu access tokens are managed locally in a JSON store located at ~/.linkfox/temu-access-tokens.json. Furthermore, API responses containing Personal Identifiable Information (PII)—including recipient names, mobile numbers, and full shipping addresses—are written to a linkfox/ directory within the project workspace to support data extraction and session logging.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from the Temu API via the LinkFox gateway.
Ingestion points: Order lists, detailed order maps, customization content, and product specifications are fetched via various scripts such as global_order_list_v2_get.py and global_order_detail_v2_get.py.
Boundary markers (absent): While the data is handled as structured JSON, the skill lacks explicit instructions or delimiters to prevent the agent from inadvertently executing natural language instructions that might be embedded within the external order data.
Capability inventory: The skill is capable of performing network operations (POST requests to vendor-controlled LinkFox domains) and writing files to the local file system.
Sanitization (absent): The fetched data is processed and presented to the agent without sanitization of the string content for potential injection patterns.
[EXTERNAL_DOWNLOADS]: The onboarding.py script requires the installation of third-party Python libraries, specifically requests, qrcode, and pillow. These are used to facilitate account registration, login flows, and the generation of QR codes for payment processing. The skill provides instructions for users to install these dependencies manually via pip.

linkfox-temu-order-global