linkfox-shopee-store-bundle-deal

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities mostly match its Shopee Bundle Deal purpose, but it sends store operations through a LinkFox proxy instead of directly to Shopee and relies on a separate auth skill, creating intermediary data-flow and transitive-trust risk. No clear malware or hostile payload is shown, but the proxy architecture, credential mediation, and inconsistent cost statements make it higher risk than a direct official API integration.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Aug 17, 2026, 07:04 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-bundle-deal%2F@e71f010e6479f67e0b64c8a23254a18b54ab80ee60a1294d3a7c80a6b675785d
Security Audit — socket — linkfox-shopee-store-bundle-deal