linkfox-echotik-list-product

SUSPICIOUS. The core TikTok product-analytics purpose aligns with the requested API key, local script execution, and response handling, and the referenced domains appear same-org LinkFox properties. The main concerns are the explicit transitive skill installation path and ZIP-based onboarding distribution, plus mandatory local persistence of full response data. This looks more like a moderately risky vendor skill than malware.