linkfox-amazon-store-catalog

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's catalog-query purpose is coherent, and there is no clear malware or rogue installer behavior, but the actual data flow goes through a third-party LinkFox proxy instead of Amazon's official direct SP-API endpoints, with server-side token resolution and mandatory response persistence to disk. That makes it a moderate-risk integration rather than a benign direct API wrapper.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:11 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-amazon-store-catalog%2F@f91607e66d10eb8251a52004acce9f3fdc51c384bc9ea3216d3a40c374af3207