Security audit
Security checks across malware telemetry and agentic risk
This ASIN keyword lookup skill is mostly disclosed, but it also includes account login, API-key generation, billing order creation, configurable credential-bearing endpoints, and persistent local storage that users should review carefully.
Install only if you are comfortable with LinkFox/SellerSprite account onboarding inside the skill, including phone/SMS login, API-key generation, paid credit purchase flows, and local saving of full keyword responses. Use only official LinkFox endpoint environment variables, avoid persisting API keys in shell profiles when possible, and review saved linkfox data files for sensitive business information.
except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeVirusTotal findings are pending for this skill version.
No suspicious patterns detected.