linkfox-shopee-store-top-picks

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's functional scope matches Shopee Top Picks management, but its data flow goes through LinkFox's developerProxy and a dependent auth skill instead of direct Shopee API usage. That proxy-based credential/token handling and transitive trust chain raise medium risk, though there is no evidence here of overt malware, hidden execution, or an unverifiable downloaded binary.

Confidence: 82%Severity: 59%
Audit Metadata
Analyzed At
Aug 17, 2026, 07:03 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-top-picks%2F@04b9209135f5e87504b5525c970479c6d1d3d63c546b7706619949bbf8319e8b
Security Audit — socket — linkfox-shopee-store-top-picks