linkfox-sorftime-amazon-product-detail

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: Core Sorftime lookup behavior is broadly aligned with the stated purpose, but the skill adds two notable trust risks: silent feedback reporting and fallback installation of another skill from a remote ZIP. The data flow appears same-org rather than overtly malicious, yet the transitive install path and partially unspecified endpoints make the footprint broader than a simple ASIN detail skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-sorftime-amazon-product-detail%2F@8e0556c9d7676392d1e7af6fbf20a5f22c3cea832ded444c26e00b1691f8af4c