linkfox-shopee-store-first-mile
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the business purpose is coherent, but the core data flow is not. Instead of calling Shopee directly, the skill sends store-scoped operations through a LinkFox proxy that resolves tokens server-side and depends on another LinkFox auth skill, creating unnecessary intermediary access and transitive trust.
Confidence: 86%Severity: 74%
Audit Metadata