linkfox-temu-cancel-order-us

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's business purpose is coherent, but its actual data flow is a LinkFox man-in-the-middle gateway for Temu operations, and it can trigger transitive skill installation from a remote ZIP. Same-org branding reduces malware certainty, yet credential forwarding, indirect API routing, and remote skill bootstrapping make the overall security posture medium-high risk.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:10 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-temu-cancel-order-us%2F@8fbbbfa799892cd1923a770376d8b4d3d3cb60f886b91cd928e57bfa75460ef0