linkfox-amazon-opportunity-report-by-keyword

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core purpose and requested API credential are broadly consistent with an Amazon market-report skill, but the fallback behavior to download and install a second skill from an unverifiable direct ZIP introduces a notable trust-chain risk. Data flow seems mostly proportionate, yet the exact API/feedback endpoints are not fully transparent from the provided material.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:08 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-amazon-opportunity-report-by-keyword%2F@77a5903c6899f300f0efa5090b35e4fd117f7b1092fbcefe8663755845012ba2