linkfox-etsy-product-query

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/etsy_product_query.py

The code appears to implement an API wrapper with local caching and session artifact management, not malware. The principal security issue is unsanitized SESSION_ID use in filesystem paths, which permits path traversal or absolute-path redirection when the environment is attacker-controlled. The configurable gateway also means sensitive headers and query data can be redirected by a manipulated environment. No embedded malicious payload or obfuscation is evident. The shown fragment additionally appears syntactically incomplete at the final main( call.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Oct 17, 2026, 03:10 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-etsy-product-query%2F@72f8d7c00e1fb84ea94a9428bbb0d577a4ce0670ba4bee380d448080ce0527c4