linkfox-shopee-store-payment

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的业务目的与支付/结算查询大体一致,但存在两类显著风险:一是所有 Shopee 数据与令牌经 LinkFox developerProxy 和下游第三方代理转发,数据流不透明;二是异常处理引导安装不可充分验证的 ZIP 版 onboarding skill,形成较高供应链与转移信任风险。整体应判为 SUSPICIOUS,而非确认恶意。

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-payment%2F@b2009a152d652dd277435e8844b982fffd77519257921d0db87c182e17c7e567