linkfox-shopee-store-livestream

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the livestream-management purpose mostly matches the capabilities, but the skill's core data flow is an intermediary proxy rather than Shopee's official API, and it can install another skill from a remote ZIP as part of onboarding. Combined with credential/token forwarding and real-world posting/moderation actions, this creates high security risk despite plausible same-org branding.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-livestream%2F@8111d6adcde3ae65fbd68e660999fd808ce0bd7b5422c8120a86a7e3aba25570