linkfox-amazon-store-catalog
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's catalog-query purpose is coherent, and there is no clear malware or rogue installer behavior, but the actual data flow goes through a third-party LinkFox proxy instead of Amazon's official direct SP-API endpoints, with server-side token resolution and mandatory response persistence to disk. That makes it a moderate-risk integration rather than a benign direct API wrapper.
Confidence: 87%Severity: 58%
Audit Metadata