The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes Python scripts (zhihuiya_simple_bibliography.py and onboarding.py) to interface with external APIs. These scripts handle data retrieval, local caching, and user onboarding tasks such as SMS verification and payment processing.
[EXTERNAL_DOWNLOADS]: The skill performs legitimate network operations to communicate with the vendor's official API endpoints, including tool-gateway.linkfox.com for patent data, api.linkfox.com for authentication, and skill-api.linkfox.com for feedback reporting. These resources are consistent with the vendor's infrastructure.
[DATA_EXFILTRATION]: The skill retrieves and stores patent metadata (titles, abstracts, inventors) in a structured local directory (linkfox/) within the workspace. This behavior is intended for result persistence and session management. It accesses the LINKFOX_AGENT_API_KEY for authorized API access, which is standard practice for this service.
[OBFUSCATION]: A static base64-encoded string is used as a request header for login operations in onboarding.py. Analysis shows it decodes to a standard JSON object containing internal identifiers (a_id), which is a benign implementation detail for the vendor's login protocol.
[DYNAMIC_EXECUTION]: The scripts include checks for optional dependencies like requests and qrcode. If missing, they provide instructions for manual installation rather than attempting to download or execute code automatically.

linkfox-zhihuiya-simple-bibliography