linkfox-kalodata-tiktok-product

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches TikTok product analytics, and no malicious installer or exploit behavior is visible, but all API use is mediated through LinkFox rather than a clearly documented official Kalodata endpoint. The required vendor API key and automatic local persistence of full responses make the data flow broader than a simple direct API skill, so this is medium risk rather than benign.

Confidence: 79%Severity: 58%
Audit Metadata
Analyzed At
Aug 16, 2026, 12:21 PM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-kalodata-tiktok-product%2F@a2b24f8b1bb368ca1937cf243fc6d41880f6851dda06c33e85219cb2e98e8241
Security Audit — socket — linkfox-kalodata-tiktok-product