linkfox-onboarding

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s main capabilities broadly match its stated onboarding/billing purpose, but it is high-trust by design because it collects phone numbers and SMS codes, retrieves API keys via local scripts, and can create payment orders. Install sources are mostly standard PyPI packages, yet documentation/provenance is only partially verifiable and the scripts handling credentials are not independently validated here.

Confidence: 80%Severity: 57%
Audit Metadata
Analyzed At
Jul 15, 2026, 12:18 PM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-onboarding%2F@a1875d312fa5bc1cd68e523a57588cae14d5db7b5b4313b6212b40a2bb9537dd