linkfox-sellersprite-competitor-lookup

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core competitor-lookup purpose is mostly aligned with the requested API key, parameters, and local result storage, but the skill expands its footprint with a transitive skill-install path and remote ZIP download lacking strong public verification. Data flows appear mostly consistent with a hosted LinkFox integration, yet the onboarding and feedback behaviors add meaningful trust and privacy risk beyond a simple lookup skill.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-sellersprite-competitor-lookup%2F@c7ed9e19445a21f61e61b126ea735e0ab59852c1b2da956875690148413bc587