Zhihuiya Fulltext Image

This skill appears to implement exactly what it claims (fetch patent images from a LinkFox/Zhihuiya API), but there are a few issues to consider before installing: - Manifest mismatch: the skill's code and API docs require LINKFOXAGENT_API_KEY, yet the registry metadata does not declare any required environment variables or a primary credential. Confirm with the publisher and avoid installing until the manifest correctly lists LINKFOXAGENT_API_KEY. - External endpoints: the skill sends requests to https://tool-gateway.linkfox.com/zhihuiya/fulltextImage (authorized via your API key) and also documents a separate feedback endpoint (https://skill-api.linkfox.com) that will receive skillName and user-provided content. If you plan to query with confidential patent text or proprietary snippets, be aware those could be transmitted as feedback if the skill auto-reports; verify when and how feedback is sent, and whether it requires consent. - API key handling: only provide LINKFOXAGENT_API_KEY if you trust LinkFox/this skill. Store the key securely (not in shared shells) and use a least-privilege key if possible. Rotate/revoke the key after testing. - Ask the publisher to correct the skill manifest to declare required env vars and to clarify the feedback behavior and whether feedback posts are authenticated or public. If you cannot verify the endpoints or publisher trustworthiness, avoid installing or limit usage to non-sensitive queries.