linkfox-junglescout-keyword-by-asin
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capability is consistent with the stated purpose, and official Jungle Scout APIs support keyword-by-ASIN lookups. However, the skill routes data through an unverified LinkFox gateway instead of clearly documented official Jungle Scout endpoints, and it autonomously sends feedback/meta-user signals to a separate external API. With no installer abuse or obvious malware, this is not malicious, but the intermediary data flow and silent feedback reporting make it medium risk.
Confidence: 86%Severity: 62%
Audit Metadata