linkfox-echotik-list-seller-product

SUSPICIOUS: The core capability matches the stated purpose, and the API key requirement is broadly proportionate, but data flows through LinkFox's gateway instead of a clearly public EchoTik endpoint, responses are always persisted locally, and the surrounding ecosystem shows medium-risk transitive install patterns via raw ZIPs. This looks more like a legitimate vendor-integrated skill with notable trust and data-handling concerns than confirmed malware.