linkfox-amazon-store-feeds

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/upload_feed_document.py

The code implements a straightforward document uploader and contains no clear evidence of intentional malware or obfuscation. Its primary risks are design-level: arbitrary local file reads and arbitrary network destinations controlled by input, possible SSRF or data exfiltration, leakage of signed URL parameters in output, and optional plaintext HTTP. These risks depend on whether untrusted users can invoke the script or provide its JSON parameters.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:11 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-amazon-store-feeds%2F@c39141b0e42bdf33df1579813f8c2b6ae0003dec5fc8bb38220f84d41113d076