linkfox-shopee-store-ads

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能的功能范围与 Shopee 广告管理基本一致,未见明显恶意安装或直接窃取本地凭据的行为;但其核心数据流通过 LinkFox developerProxy 和额外的紫鸟代理,而非直接访问官方 Shopee API,且服务端代持并注入广告 token,形成明显的中间层信任与数据可见性风险。整体更像受管代理集成而非恶意技能,但数据流完整性存在中度风险,应视为可疑而非确认恶意。

Confidence: 82%Severity: 57%
Audit Metadata
Analyzed At
Aug 17, 2026, 07:03 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-ads%2F@9348754893c0ae88c8c74acb015e429746ddf19c2ab83f31b4a8f761fde27c8b
Security Audit — socket — linkfox-shopee-store-ads