linkfox-tiktok-selection-and-shoppable-video

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs include direct downloads of a ZIP installer (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip) hosted on a non-standard "agent-files" file server and explicitly instruct the user to extract/install — a high-risk pattern for distributing code/artifacts outside official package managers or vendor pages.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). 该 skill 在运行时会将用户提供的商品标识/URL（如 EchoTik/TikTok Shop 的 productUrls 或 url 参数）直接作为请求入参发送给后端并返回结构化结果文本（例如 echotik/batchProductDetail 与 echotik/getVideoDownloadUrl），但未见任何“先选择/拉取未指定的第三方免费文本源”的通用外部内容读取流程。