linkfox-temu-price-global

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's business purpose is coherent, but its actual data flow is not ideal because it forwards Temu credentials and requests through LinkFox's gateway instead of official Temu endpoints, and it can trigger transitive installation of another skill from a remote ZIP. This looks more like a managed proxy integration than outright malware, but the credential routing and secondary-skill install materially raise risk.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:10 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-temu-price-global%2F@5bb043070a8a16d5ee2a1073a427a6e467991e686d042e210eae0404b846e592