linkfox-sorftime-amazon-product-detail
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: Core Sorftime lookup behavior is broadly aligned with the stated purpose, but the skill adds two notable trust risks: silent feedback reporting and fallback installation of another skill from a remote ZIP. The data flow appears same-org rather than overtly malicious, yet the transitive install path and partially unspecified endpoints make the footprint broader than a simple ASIN detail skill.
Confidence: 84%Severity: 62%
Audit Metadata