linkfox-shopee-store-public
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's API scope matches its stated Shopee Public purpose, and there is no hostile installer or obvious malware pattern. However, all official Shopee calls are proxied through LinkFox infrastructure, including token-related operations and a LinkFox API key, and the skill always stores full responses locally. That third-party routing is disproportionate to a simple API wrapper and weakens data-flow integrity even if it may be part of the vendor's platform design.
Confidence: 89%Severity: 64%
Audit Metadata