linkfox-kalodata-tiktok-livestream

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能整体用途与能力基本一致:查询 TikTok 直播榜单/详情并返回结果,未见明显恶意载荷、隐藏执行或无关高危权限。主要风险在于数据与 API Key 通过未公开细节的 LinkFox 网关流转、自动调用 Feedback API,以及默认将完整响应持久化到本地项目目录。这些问题更符合可疑/中等风险的数据流透明度与隐私暴露问题,而非确认恶意。

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
Aug 16, 2026, 09:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-kalodata-tiktok-livestream%2F@732eb5febd7ce36784029443dd0b57767bf7fe816fd36fe92b4485c5885d8aa3
Security Audit — socket — linkfox-kalodata-tiktok-livestream