Security audit
Security checks across malware telemetry and agentic risk
The skill mostly matches its image-replication purpose, but it needs review because it can publish local images, use paid external APIs, handle account/payment setup, and persist response data with limited confirmation.
Install only if you are comfortable with product/reference images being uploaded to public URLs, Amazon listing data and generated images being saved locally, and LinkFox API credentials being used for paid external calls. Use a clean environment with trusted LINKFOX_* endpoint variables, avoid sensitive/proprietary images unless public exposure is acceptable, and prefer self-service account setup over sharing phone/SMS codes through the agent.
except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeexcept RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeVirusTotal findings are pending for this skill version.
No suspicious patterns detected.