AFOL BrickLink

• Analyzed: May 10, 2026, 6:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: d581caa6a79e1f9b2f53c0fdcbafab9bf0357723c5e7f31617d17f63d7bbf000
• Source: palm
• External report: View on VirusTotal

Findings (1)

The BrickLink AFOL skill bundle is a legitimate tool for interacting with the BrickLink LEGO marketplace API. The core logic in `scripts/bricklink_cli.py` implements standard OAuth 1.0a authentication and provides a CLI for catalog lookups and store management without any evidence of malicious intent, data exfiltration, or unauthorized execution. The `SKILL.md` file includes robust safety instructions for the AI agent, explicitly requiring user confirmation for any mutating operations (POST/PUT/DELETE) and providing a `--dry-run` mode for inspection. While the `BRICKLINK_API_BASE_URL` can be overridden via environment variables (a common feature for API clients), the code follows best practices for credential handling and input encoding.