linkfox-amazon-store-customer-feedback

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS:能力与“Amazon Customer Feedback 洞察”总体一致,未见明显恶意载荷或下载执行链;但该 skill 将认证和 API 调用经 LinkFox 的 /spApi/storeTokens 与 /spApi/developerProxy 中转,而非直连 Amazon 官方 SP-API,导致凭证与业务数据先流向第三方网关,数据流透明度不足。风险主要来自代理式中转、技能依赖链和默认本地持久化,而非确认恶意行为。

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:08 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-amazon-store-customer-feedback%2F@d9e4a2a3f0fd5413ecb40e35c19e9793970274e9ceb1a02c9150c830149af491