linkfox-echotik-list-seller

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capability fits the stated TikTok seller analytics purpose, and there are no clear malware or download-execute patterns. The main concern is data-flow integrity: the skill uses a LinkFox proxy and LinkFox credentials instead of EchoTik's documented direct API/auth, plus it persistently stores full responses locally and may auto-send feedback. This is a medium-risk, third-party-mediated integration rather than confirmed malicious behavior.

Confidence: 85%Severity: 54%
Audit Metadata
Analyzed At
Aug 16, 2026, 12:21 PM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-echotik-list-seller%2F@3d0b58543769a84f3761c7631ed2aec9ad71f06bb53d0a7a87f51fd20551f4fb
Security Audit — socket — linkfox-echotik-list-seller