Security audit
Security checks across malware telemetry and agentic risk
The skill appears to query Etsy products as advertised, but it sends an API key to a configurable network gateway and saves full responses locally in ways users may not expect.
Review before installing. Only use it if you are comfortable sending Etsy query parameters and your LinkFox API key to the configured gateway, and check or unset any LINKFOX_TOOL_GATEWAY value before running. Expect full API responses to be saved under a local linkfox directory, with possible fallback to home or temporary storage if the preferred path is not writable.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""VirusTotal findings are pending for this skill version.
No suspicious patterns detected.