linkfox-temu-fulfillment-us

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s functional scope matches Temu fulfillment, but it proxies credentials and business data through LinkFox-controlled endpoints rather than direct Temu APIs, and it includes transitive skill installation from a ZIP fallback. Same-brand evidence lowers the chance of outright malware, yet the intermediary data flow and extra trust chain make this higher risk than a normal direct API integration.

Confidence: 84%Severity: 66%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:10 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-temu-fulfillment-us%2F@f3946bc292b270b0b4ffc9600d6156c01fa085bb24363c8b4859da9c18b93b06