Security audit
Security checks across malware telemetry and agentic risk
This Etsy category lookup skill is not clearly dangerous, but it sends API-key-authenticated queries to a remote LinkFox service and stores full responses locally despite describing the lookup as local.
Review before installing. Use this only if you are comfortable sending Etsy category search terms and LinkFox authorization headers to LinkFox’s gateway. Avoid setting LINKFOX_TOOL_GATEWAY unless you fully trust the destination, and expect full responses to be written under local linkfox directories unless you run with cache/storage controls.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""VirusTotal findings are pending for this skill version.
No suspicious patterns detected.