Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real LinkFox keyword-mining bundle, but it also handles account login, API keys, payments, public uploads, and broadly configurable network calls that deserve Review before installation.
Install only if you trust LinkFox with your Amazon keyword queries, generated files, LinkFox account/API key, and any files you choose to upload publicly. Before use, confirm the gateway environment variables point to LinkFox-controlled HTTPS hosts, avoid providing SMS codes or starting payment orders unless you intentionally want account setup or billing, and review/clean the local linkfox output and cache directories after sensitive work.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.code}
try:
proc = subprocess.run(
[sys.executable, AIGC_TEXTGEN_PATH, "--stdin", "--content-only"],
input=json.dumps(params, ensure_ascii=False),
capture_output=True,except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codereq = Request(url, headers={"User-Agent": "LinkFox-Skill/2.0"})
try:
with urlopen(req, timeout=timeout) as resp:
# 从 Content-Type 进一步修正扩展名
if guessed_ext == "bin":
ct = resp.headers.get("Content-Type", "")req = Request(url, headers={"User-Agent": "LinkFox-Skill/2.0"})
try:
with urlopen(req, timeout=timeout) as resp:
# 从 Content-Type 进一步修正扩展名
if guessed_ext == "bin":
ct = resp.headers.get("Content-Type", "")VirusTotal findings are pending for this skill version.
Detected: suspicious.secret_argv_exposure