linkfox-amazon-store-feeds

Warn

Audited by Socket on May 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s Feeds functionality is purpose-aligned, but its real data flow is mediated through LinkFox proxy/token endpoints rather than direct Amazon SP-API calls, and it depends on another unreviewed skill. No overt malware or hostile install chain is shown, yet the third-party proxying and transitive trust make the overall skill medium risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 30, 2026, 12:05 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-amazon-store-feeds%2F@3968f1898f3061fa73ac5936d3ff76bdd5588c00