linkfox-aigc-videogen-multi

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能主功能与其描述基本一致,核心数据流是将图片和提示词提交给 LinkFox 远程视频生成接口并保存结果,整体不是明显恶意。但它在认证/余额异常时强制引导安装另一个技能,且安装方式为未经公开校验的同品牌 ZIP 直链,形成显著的供应链与跨技能信任链风险;因此应判定为可疑而非恶意。

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:08 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-aigc-videogen-multi%2F@93e012045a1ac0d62ab6b8a412f635fdc79eac4a2878b8989df2a2d1ccfb2b7d