linkfox-kalodata-tiktok-product
Warn
Audited by Socket on Aug 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated purpose matches TikTok product analytics, and no malicious installer or exploit behavior is visible, but all API use is mediated through LinkFox rather than a clearly documented official Kalodata endpoint. The required vendor API key and automatic local persistence of full responses make the data flow broader than a simple direct API skill, so this is medium risk rather than benign.
Confidence: 79%Severity: 58%
Audit Metadata