linkfox-echotik-product-search

Warn

Audited by Socket on May 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core purpose is coherent, but its actual data path is not fully aligned with the EchoTik framing: requests and possible credentials appear to flow through a LinkFox gateway and hidden feedback endpoint rather than directly to official EchoTik APIs. No clear malware behavior is shown, but the intermediary routing, opaque endpoint details, and disk persistence of sensitive responses make this a medium-risk skill.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
May 30, 2026, 12:05 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-echotik-product-search%2F@3b745a417a0d39b359326d3768c8a2cac88d02f3