linkfox-onboarding
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s main capabilities broadly match its stated onboarding/billing purpose, but it is high-trust by design because it collects phone numbers and SMS codes, retrieves API keys via local scripts, and can create payment orders. Install sources are mostly standard PyPI packages, yet documentation/provenance is only partially verifiable and the scripts handling credentials are not independently validated here.
Confidence: 80%Severity: 57%
Audit Metadata