linkfox-temu-cancel-order-global

SUSPICIOUS. The skill’s business purpose is coherent, but its real data flow routes Temu credentials and order data through LinkFox proxy endpoints instead of official Temu APIs, creating a meaningful credential-forwarding and third-party visibility risk. No strong malware indicators or hostile installer patterns are present, but the proxy-centric design and mandatory local response retention make this a medium-high security risk skill.