linkfox-shopee-store-bundle-deal
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities mostly match its Shopee Bundle Deal purpose, but it sends store operations through a LinkFox proxy instead of directly to Shopee and relies on a separate auth skill, creating intermediary data-flow and transitive-trust risk. No clear malware or hostile payload is shown, but the proxy architecture, credential mediation, and inconsistent cost statements make it higher risk than a direct official API integration.
Confidence: 87%Severity: 58%
Audit Metadata