Security audit
Security checks across malware telemetry and agentic risk
This image-analysis skill is not clearly malicious, but it includes account login, API-key generation, billing/order creation, automatic feedback reporting, and persistent local logging that should be reviewed before installation.
Install only if you are comfortable with LinkFox receiving product image URLs, product data, prompts, userInput, feedback content, and any phone/SMS/account details used for onboarding. Use official LinkFox endpoint environment variables only, avoid sending secrets in prompts or product data, review any plan/order/payment step before approving it, and periodically clear the local linkfox output/cache directories if retained product data is sensitive.
method="POST",
)
try:
with urlopen(req, timeout=150) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeexcept RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""VirusTotal findings are pending for this skill version.
No suspicious patterns detected.