linkfox-zhihuiya-claim-data-translated
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install an onboarding utility from the vendor's file server at
https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zipif authentication or quota issues occur. This is a documented troubleshooting step using vendor-managed resources. - [COMMAND_EXECUTION]: The skill utilizes a Python script (
scripts/zhihuiya_claim_translated.py) to handle API requests, manage local caching in thelinkfox/.cachedirectory, and save full response data to the project workspace. - [DATA_EXFILTRATION]: User-supplied patent identifiers (publication numbers or internal IDs) and target language preferences are transmitted to the external API gateway at
tool-gateway.linkfox.comto fulfill the data request. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays patent claim text retrieved from a remote database. This represents an indirect prompt injection surface as the agent processes external content; however, the data originates from a structured patent database and no explicit boundary markers are used when presenting the text.
Audit Metadata