linkfox-temu-returns-refunds-eu
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python scripts to perform network operations and local file management. Specifically,
scripts/onboarding.pyandscripts/_temu_token_store.pyexecute logic to manage account onboarding and store access tokens in the user's home directory (~/.linkfox/temu-access-tokens.json). - [DATA_EXPOSURE]: The skill documentation and scripts refer to sensitive environment variables such as
LINKFOXAGENT_API_KEY. However, the scripts follow best practices by providing masking for these tokens in output and encouraging users to store business-specificaccessTokensin a localized, non-temporary JSON store rather than hardcoding them. - [EXTERNAL_DOWNLOADS]: The skill makes legitimate network requests to LinkFox and Temu API endpoints (
tool-gateway.linkfox.com,api.linkfox.com,agent-api.linkfox.com). These are the primary functions of the skill and target the service provider's infrastructure.
Audit Metadata