linkfox-temu-fulfillment-eu
Fail
Audited by Socket on Jun 13, 2026
2 alerts found:
AnomalyObfuscated FileAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
该 skill 的业务能力与“Temu EU 发货/履约”目的基本一致,但数据流通过 LinkFox 第三方网关而非 Temu 官方端点,且会转发 accessToken 与平台密钥,属于中等偏高风险的代理型集成。未见恶意载荷或可疑安装链,更像高信任要求的中间层服务,而非确认恶意。
Confidence: 100%Severity: 60%
Obfuscated Filereferences/apis/bg-logistics-warehouse-list-get.md
HIGHObfuscated FileHIGH
references/apis/bg-logistics-warehouse-list-get.md
The provided material is a thorough API spec and usage example set rather than executable code. The main security concerns are token handling and potential overexposure of warehouse data through default behavior and logs. With disciplined secret management, strict access controls, and ensuring TLS-protected transport, the risk remains moderate but manageable. Ensure downstream services enforce authorization scopes and avoid logging sensitive tokens or identifiers in plaintext.
Confidence: 90%
Audit Metadata