Security audit
Security checks across malware telemetry and agentic risk
This image-similarity skill should be reviewed because it also includes account login, API-key generation, billing/order flows, automatic feedback reporting, and broad local result persistence.
Install only if you are comfortable letting this skill send product data and user instructions to LinkFox, persist full results locally, and guide users through LinkFox account, API-key, and payment flows. Avoid using it in environments where LINKFOX_* endpoint variables could be set by untrusted parties, and do not provide phone numbers, SMS codes, or payment choices unless you intend to complete LinkFox onboarding or billing actions.
method="POST",
)
try:
with urlopen(req, timeout=150) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeexcept RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""VirusTotal findings are pending for this skill version.
No suspicious patterns detected.