linkfox-temu-fulfillment-global

SUSPICIOUS: The fulfillment capabilities fit the stated purpose, but the real data flow is through LinkFox gateway endpoints that receive Temu tokens and shipping data instead of using official Temu APIs directly. The mandatory local persistence of responses and the fallback installation of another skill from a zip add medium-high trust and exposure risk, though there is not enough evidence to call it confirmed malware.