linkfox-shopee-store-merchant

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities broadly align with Shopee merchant lookup, and there is no malware-style installer or overt exfiltration pattern in the provided text. However, credentials and merchant data are routed through LinkFox infrastructure and a further stated 'shopee-proxy' intermediary instead of directly to Shopee, and the skill also posts feedback to a vendor endpoint and stores full responses locally. That footprint is somewhat disproportionate and reduces data-flow integrity, so this is not benign despite lacking confirmed malicious behavior.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:13 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-merchant%2F@26b59f2bd1c1c5a01299cc2353c9be3fe99368aa2f89a30ecc1a4bf74a9fe2f4