linkfox-shopee-store-shop-flash-sale

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated Shopee Flash Sale purpose is plausible, but the actual footprint routes store API traffic and tokens through a LinkFox proxy instead of Shopee directly, and it can trigger transitive skill installation from a ZIP archive. These choices are not clearly proportionate to a standard Shopee API integration, and the billing guidance is internally inconsistent.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-shop-flash-sale%2F@f58f4ca5c740c90f93885d572f7e1218c8210c153c4139e4e69b931459c087da