linkfox-shopee-store-public

SUSPICIOUS: the skill's Shopee-related capabilities fit its stated purpose, but it sends OAuth and partner data through a LinkFox intermediary instead of direct Shopee endpoints, and it can trigger installation of another skill from a ZIP archive. This is not confirmed malware, but the proxy-based data flow and transitive skill installation create a meaningful security and trust risk.