linkfox-shopee-store-bundle-deal

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的业务能力与“Shopee Bundle Deal 管理”大体匹配,但核心风险在于所有 API 调用与认证都经 LinkFox 代理中转,而非直连 Shopee 官方端点;再叠加默认本地持久化完整响应、异常时引导安装另一技能,形成明显的数据流与信任链扩张。整体更像可用但高信任要求的平台代理集成,判定为可疑而非确认恶意。

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-bundle-deal%2F@71f32b2aa2bdd8554f59496cf2d77756b4eca9f6b5f8991987e8620fd6b5cf8c