linkfox-shopee-store-auth

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Most URLs are official Shopee/LinkFox endpoints, but the agent-files.linkfox.com direct release.zip link is a direct archive download (installer) which is a high-risk distribution vector for malware unless verified by the user and the vendor; therefore the presence of that .zip makes this set partially suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). SKILL.md (lines 46-48) instructs the agent at runtime to download and install https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip when onboarding.md is missing, which would fetch and install remote code that can change/execute agent behavior.