skills/linkfox-ai/linkfox-skills/linkfox-shopee-store-push/Socket

linkfox-shopee-store-push

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the functional scope mostly matches Shopee Push management, but the skill proxies API traffic through LinkFox, persists full responses locally, and instructs installation of another skill from an unverifiable ZIP. This is not confirmed malware, yet the install trust and data-flow model are riskier than a direct Shopee integration.

Confidence: 85%Severity: 80%

Audit Metadata

Analyzed At

Jul 16, 2026, 08:09 AM

Package URL

pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-push%2F@eb6395c4d988c27d089119913af8d7e55f3188a536714150a474157ee4a232b5