linkfox-zhihuiya-patent-family
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONOBFUSCATIONCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill provides instructions and shell commands in
references/onboarding.mdandscripts/onboarding.pyto modify shell configuration files (~/.zshrc,~/.bashrc) and Windows environment variables (setx) to persist theLINKFOX_AGENT_API_KEYfor authentication. - [INDIRECT_PROMPT_INJECTION]: The skill processes patent data from the Zhihuiya (PatSnap) API which is then ingested by the agent, creating a surface for potential indirect instructions.
- Ingestion points: API response data processed in
scripts/zhihuiya_patent_family.py. - Boundary markers: Absent; the data is printed to standard output or written to files for the agent's context without clear delimiters or warnings.
- Capability inventory: The agent can execute local Python scripts and perform file system writes to the
linkfox/directory. - Sanitization: No explicit sanitization or filtering of external API content is performed before presentation to the agent.
- [OBFUSCATION]:
scripts/onboarding.pycontains a hardcoded Base64-encoded string_LOGIN_FIXED_UID. Decoded value:{"a_id":"6a22c8b05bc916a","d_id":""}. This is used as a functional header value for login requests. - [COMMAND_EXECUTION]: The skill's documentation and scripts facilitate the execution of shell commands for environment configuration, such as setting persistent environment variables using
setxor redirection operators (>>).
Audit Metadata