linkpix-happyhorse-sales

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能与其“青虎AI电商视频生成”用途基本一致,主要行为是安装 qhkit、配置青虎密钥、上传素材并轮询生成结果。未见凭据外传到明显无关域名或隐藏执行逻辑,但其自动安装多种依赖、允许镜像源兜底、并要求用户把 API 密钥交给智能体,带来中等供应链与凭据处理风险。总体更像用途一致但执行面较大的集成技能,判定为 SUSPICIOUS 而非恶意。

Confidence: 87%Severity: 57%
Audit Metadata
Analyzed At
Sep 21, 2026, 04:10 PM
Package URL
pkg:socket/skills-sh/autoagc%2Flinkpix-skills%2Flinkpix-happyhorse-sales%2F@31826bcbd946414fd0fefdbd671c044051028239608138534a61f6431ef880ec