linkfox-shopee-store-merchant
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's purpose and capabilities broadly align with Shopee merchant lookup, and there is no malware-style installer or overt exfiltration pattern in the provided text. However, credentials and merchant data are routed through LinkFox infrastructure and a further stated 'shopee-proxy' intermediary instead of directly to Shopee, and the skill also posts feedback to a vendor endpoint and stores full responses locally. That footprint is somewhat disproportionate and reduces data-flow integrity, so this is not benign despite lacking confirmed malicious behavior.
Confidence: 85%Severity: 58%
Audit Metadata