skills/linkfox-ai/linkfox-skills/linkfox-1688-procurement/Socket

linkfox-1688-procurement

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core 1688 procurement capabilities are aligned with the stated purpose and mostly route to same-vendor LinkFox services, but the skill is high-impact because it performs real purchasing actions and includes a transitive skill-install fallback from an unpinned ZIP. This is not confirmed malware, but it carries meaningful operational and supply-chain risk.

Confidence: 82%Severity: 61%

Audit Metadata

Analyzed At

Jul 16, 2026, 08:09 AM

Package URL

pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-1688-procurement%2F@79ea4d3bbbdaab1a7f6a3542c9f26ae61cf064775502d95a9aad47472d9b6f0a