linkfox-temu-fulfillment-us

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's fulfillment purpose is coherent, and there is no obvious malware installer behavior, but its data flow is not end-to-end with Temu. It proxies Temu tokens and shipping/order data through LinkFox-controlled endpoints and persists full responses locally, making the main risk third-party credential/data interception and unnecessary sensitive-data retention.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:13 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-temu-fulfillment-us%2F@04a61be0d7ae28bba132fef0ef4dbcb5c7fa519f88e1113ba80ea00f01eb5037