linkfox-google-trend-get-trend-by-keys

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the main Google Trends analysis workflow is broadly aligned with purpose and uses vendor-consistent credentials, but the fallback flow introduces a notable supply-chain and transitive-trust issue by directing the agent to download and install another skill from a ZIP URL. This is more risky than necessary for onboarding, though not enough to indicate confirmed malware.

Confidence: 82%Severity: 62%
Audit Metadata
Analyzed At
Jul 16, 2026, 06:28 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-google-trend-get-trend-by-keys%2F@f5958ffe9a65a37e3dee8add2228bed2445e218b9fb9e45b5155ab7b3c1662da