linkfox-ai-mode-google-search

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core capability matches the stated purpose, and the required API key is broadly proportionate, but the skill routes search through LinkFox rather than Google directly, writes all responses into the local project, and includes a transitive-skill fallback installed from a direct zip download with limited verifiable release hygiene. This is not clearly malicious, but the trust and data-flow footprint is larger than a narrowly scoped Google-search helper.

Confidence: 85%Severity: 71%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-ai-mode-google-search%2F@1706048f2b505e168c6775e6ada983c2ec38f02bf1486987466971ca21974489