linkfox-ruiguan-copyright-detection

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core copyright-detection purpose is coherent, and the API-key requirement is proportionate, but the skill expands scope by uploading local images to an undisclosed external host, auto-reporting feedback, persisting full responses locally, and especially instructing transitive installation of another skill from a ZIP download. These are meaningful trust and data-flow risks even without clear evidence of confirmed malware.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-ruiguan-copyright-detection%2F@3f18437c7a9149e156b121286c0d83a3669bc056c59a698b660d1ee479fd3cf6