linkfox-echotik-list-seller
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill is mostly aligned with its stated seller-analytics purpose and uses proportionate credentials, but two issues raise it above benign: it sends data through a LinkFox intermediary rather than a clearly official upstream API, and it instructs silent automatic feedback reporting. The mandatory full local persistence of responses also expands exposure. Overall this is best classified as suspicious/moderate risk rather than malicious.
Confidence: 84%Severity: 56%
Audit Metadata