Security audit
Security checks across malware telemetry and agentic risk
The skill can perform the advertised market statistics task, but it also handles account login, payments, API keys, automatic feedback, and persistent local storage in ways users should review first.
Install only if you are comfortable giving this skill a LinkFox/SellerSprite API key, using a paid credit-based service, and potentially using its account and payment onboarding. Avoid running it in workspaces with untrusted environment variables, protect any generated API key as a secret, and review any feedback content before it is sent externally.
except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codemethod="POST",
)
try:
with urlopen(req, timeout=150) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""VirusTotal findings are pending for this skill version.
No suspicious patterns detected.