Security audit
Security checks across malware telemetry and agentic risk
The skill mostly matches Shopee Ads usage, but it also bundles sensitive account, API-key, payment, and default data-storage behavior that users should review before installing.
Install only if you intend to let this skill access LinkFox/Shopee Ads through an API key, read advertising account data, and potentially create or edit paid campaigns. Treat onboarding and billing as sensitive: do not provide phone/SMS codes or create payment orders unless you explicitly want LinkFox account setup or recharge help. Avoid custom gateway URL environment overrides unless you trust the endpoint, review every create/edit/order action before it runs, and clean up saved response JSON, QR images, and shell-profile API keys when no longer needed.
except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeVirusTotal findings are pending for this skill version.
No suspicious patterns detected.