linkfox-temu-cancel-order-global

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's stated purpose is coherent, and its install path does not show classic malware or supply-chain red flags. However, the actual runtime model routes Temu credentials and order-cancellation traffic through a LinkFox-controlled gateway instead of the official Temu API, creating a notable third-party data-flow and credential-forwarding risk that is disproportionate to a simple API wrapper.

Confidence: 85%Severity: 66%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:13 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-temu-cancel-order-global%2F@3f8ef1c8bd370ec2d712b4ac868f9a19acb90badecab4aada36e540798236ffe