linkfox-temu-fulfillment-us

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. 该技能目的与电商履约场景基本相关,但核心风险在于它并非直连 Temu 官方 API,而是把 LinkFox API key、Temu accessToken 和业务数据统一发送到 LinkFox 网关,并默认把完整响应落盘到项目目录。未见明显恶意执行或外部二进制安装,因此不像确认恶意软件;但第三方凭证转发、非官方数据路径和计费说明不一致使其整体呈中高风险。

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Aug 17, 2026, 07:04 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-temu-fulfillment-us%2F@641ad1537dc2d8210403f949beb7ae00b5532dc0a7ed29e5f8be14910f7e1739
Security Audit — socket — linkfox-temu-fulfillment-us