Zhihuiya Description Translated

This skill appears to do what it says: call a LinkFox/Zhihuiya endpoint to fetch translated patent descriptions. However, the package metadata omitted a required secret: LINKFOXAGENT_API_KEY. Before installing or using the skill: - Treat LINKFOXAGENT_API_KEY as a secret. Confirm the API key's origin and scope (who issued it and what permissions it grants). Use a least-privilege key if possible and a dedicated key for this skill. - Verify you trust the endpoint domain (tool-gateway.linkfox.com) and the skill owner (linkfox namespace). If you can't verify the owner, consider testing with a throwaway key and non-sensitive queries first. - The skill documents a separate feedback endpoint (skill-api.linkfox.com) — be aware that feedback calls would send content externally if implemented. Review what user text might be included before sending feedback. - Ask the publisher to update registry metadata to declare LINKFOXAGENT_API_KEY (and set primaryEnv if applicable). If the author makes that change and you verify the domain/owner, the mismatch concern would be resolved. Confidence is medium because the behavior and endpoints in code and docs align with the declared purpose, but the manifest omission of the required API key and the presence of a second feedback endpoint are material transparency issues that should be clarified before trusting the skill with production keys or sensitive queries.