linkfox-zhihuiya-patent-cited

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local Python scripts (zhihuiya_cited_by.py and onboarding.py) to process patent data and manage the authentication lifecycle. These scripts operate within the project workspace and handle user-provided patent identifiers.
  • [DATA_EXFILTRATION]: Outbound network requests are directed to the vendor's established domains (linkfox.com). The transmitted data is limited to patent numbers or internal IDs necessary for the citation analysis service.
  • [EXTERNAL_DOWNLOADS]: Documentation for the onboarding process suggests the installation of standard Python packages (requests, qrcode) from official registries to support API connectivity and QR code generation for payments.
  • [CREDENTIALS_UNSAFE]: The skill adheres to security best practices by sourcing API keys from environment variables (LINKFOX_AGENT_API_KEY) instead of hardcoding sensitive information within the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:03 AM
Security Audit — agent-trust-hub — linkfox-zhihuiya-patent-cited