linkfox-temu-store-query
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python scripts (
temu_store_query.pyandonboarding.py) to interact with the LinkFox API gateway. These scripts use standard libraries (urllib) and optional third-party libraries (requests) to perform HTTP POST requests for data retrieval and account management. - [DATA_EXFILTRATION]: The skill retrieves the
LINKFOX_AGENT_API_KEYfrom environment variables. This credential is used solely for authenticating requests to the vendor's authorized API domains (linkfox.comsubdomains). The analysis confirms no attempts to access sensitive local files (e.g., SSH keys, cloud credentials) or send data to untrusted third-party servers. - [EXTERNAL_DOWNLOADS]: The
onboarding.pyscript checks for the presence ofrequestsandqrcodelibraries. If missing, it provides the user with manual installation instructions rather than executing unverified background downloads. - [INDIRECT_PROMPT_INJECTION]: The skill processes store data returned from the Temu API. It follows safe handling practices by writing raw responses to a local session directory (
linkfox/) and providing the agent with structured summaries, minimizing the risk of the LLM being influenced by malicious content embedded in the API data.
Audit Metadata