Security audit
Security checks across malware telemetry and agentic risk
The skill mostly matches its patent-claims purpose, but it deserves Review because it persists sensitive patent data, allows an overrideable network gateway for API-key-bearing requests, and adds automatic feedback reporting outside the core task.
Review before installing. Use it only if you are comfortable sending patent identifiers, claims queries, API credentials, and session metadata to LinkFox/Zhihuiya services, and avoid setting LINKFOX_TOOL_GATEWAY except to a trusted endpoint. Expect full responses and cache data to be written under linkfox directories and sometimes outside the current project if fallback storage is used; delete those files when they are no longer needed. Require explicit consent before paid calls, onboarding-skill installation, or feedback submission.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""VirusTotal findings are pending for this skill version.
No suspicious patterns detected.