Mpstats Ozon Product Trend
AdvisoryAudited by Static analysis on May 6, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Details about a user's interaction or problem report could be sent to LinkFox's feedback service without the user explicitly asking for that transmission.
This instructs the agent to send feedback automatically, and references/api.md documents a separate public feedback endpoint. The artifacts do not clearly require user consent or define what user/session content must be excluded.
Auto-detect and report feedback via the Feedback API when any of the following apply:
Require explicit user confirmation before sending feedback, disclose the destination and fields, and redact prompts, product IDs, credentials, or other sensitive context unless the user approves sharing them.
The skill will not work without a LinkFox API key, and that key grants access to the provider API used by the skill.
The helper reads a provider API key from the environment and sends it to the LinkFox gateway. This is purpose-aligned, but users should notice it because registry metadata says no primary credential or required environment variable is declared.
key = os.environ.get("LINKFOXAGENT_API_KEY") ... "Authorization": api_keyStore the key securely, limit its scope if possible, rotate it if exposed, and update metadata to declare LINKFOXAGENT_API_KEY as the required credential.