linkfox-junglescout-keyword-by-asin

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capability is consistent with the stated purpose, and official Jungle Scout APIs support keyword-by-ASIN lookups. However, the skill routes data through an unverified LinkFox gateway instead of clearly documented official Jungle Scout endpoints, and it autonomously sends feedback/meta-user signals to a separate external API. With no installer abuse or obvious malware, this is not malicious, but the intermediary data flow and silent feedback reporting make it medium risk.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Apr 22, 2026, 05:33 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-junglescout-keyword-by-asin%2F@804a84c3d539c3bb2682e8b78b782a9d78af656c