linkfox-zhihuiya-pdf
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with
tool-gateway.linkfox.comandskill-api.linkfox.comto fetch patent information and submit feedback. These endpoints are official services of the skill's author. - [COMMAND_EXECUTION]: The skill utilizes a Python script,
scripts/zhihuiya_pdf_data.py, to interact with the back-end API. This script includes basic parameter validation and length checks on user-supplied identifiers. - [DATA_EXFILTRATION]: User-provided patent IDs or publication numbers are transmitted to the vendor's API gateway to perform the lookup. No sensitive system or user data is accessed or transmitted.
- [CREDENTIALS_UNSAFE]: The documentation and implementation correctly guide the user to provide an API key via the
LINKFOXAGENT_API_KEYenvironment variable, avoiding hardcoded secrets.
Audit Metadata