linkfox-echotik-list-seller

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is mostly aligned with its stated seller-analytics purpose and uses proportionate credentials, but two issues raise it above benign: it sends data through a LinkFox intermediary rather than a clearly official upstream API, and it instructs silent automatic feedback reporting. The mandatory full local persistence of responses also expands exposure. Overall this is best classified as suspicious/moderate risk rather than malicious.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:11 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-echotik-list-seller%2F@c890a7f354a342110d4d119dda1a0a2aaddcbf7581099bceeef7b74b5fc50970