linkfox-keepa-product-series

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL is a direct download of an archive (agent-files.linkfox.com/.../release.zip) with explicit instructions to "download and install" the skill — a common malware distribution vector — while the other links are API/docs endpoints on the linkfox domains and look benign.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs at runtime to download and install an external onboarding skill from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip which would fetch and load remote code/content that can control agent prompts/instructions.