linkfox-shopee-store-push

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and core capabilities largely align with Shopee Push management, and there is no evidence of malware-style payload delivery. The main concern is data-flow integrity: Shopee API traffic and LinkFox API keys are routed through LinkFox proxy infrastructure instead of direct official Shopee endpoints, plus the skill depends on another skill and has minor billing/usage inconsistencies. This is better characterized as medium security risk from intermediary credential/data routing and transitive trust, not confirmed malware.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:13 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-push%2F@3e4ec0fa22188de4ab685ef1957c1f595dcc0db46f23c9cc499d4d6bdd559730