Security audit
Security checks across malware telemetry and agentic risk
The skill has a real SellerSprite market-research purpose, but it adds credential-sensitive routing, mandatory local retention, automatic feedback reporting, and a runtime dependency-install path that users should review.
Install only if you trust LinkFox/SellerSprite and are comfortable with paid-credit API calls and full market-research responses being stored locally. Keep LINKFOX_TOOL_GATEWAY unset unless you control the destination, review or disable automatic feedback behavior, and do not allow the skill to install the onboarding package unless you intentionally want that extra skill added.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""60/60 vendors flagged this skill as clean.
No suspicious patterns detected.