linkfox-shopee-store-account-health

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's business purpose is coherent, but its actual data flow is not: Shopee tokens and account-health data are routed through a LinkFox proxy instead of Shopee's official endpoints. Combined with transitive skill installation from a ZIP and unclear release verification, this creates meaningful security risk without enough evidence for confirmed malware.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-account-health%2F@ec6c7b40ba8913257991621c6dab0516974396b5e314c56a055a9bd21ba00616