linkfox-echotik-batch-product-detail

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core EchoTik product-analytics purpose is coherent and the main data flow appears to target same-brand LinkFox services, but the skill overreaches by instructing transitive installation of another skill from an unverifiable ZIP distribution path and by auto-sending feedback. This is better classified as a high supply-chain/trust risk than confirmed malware.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-echotik-batch-product-detail%2F@43fada53492130be6c1ca72d9f545cad4f3fcc1b305dc4ccba2c6395b634425c