linkfox-echotik-get-video-download-url

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core TikTok-link resolution purpose matches the described capability, and the API-key use appears proportionate, but the skill expands scope by auto-reporting feedback and especially by instructing transitive installation of another skill from a remote ZIP. The main concern is install/execution trust and inherited permissions, not confirmed malware.

Confidence: 82%Severity: 72%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-echotik-get-video-download-url%2F@809822ba8f982e8d6891ee5ad3710bc98246b68b1dde102ff34950d44dffa553