linkfox-temu-promotion-us

SUSPICIOUS. The skill's core purpose is coherent, and the publisher/source relationship appears same-org, but the actual data flow routes Temu credentials and API traffic through LinkFox gateway endpoints instead of official Temu hosts. That intermediary design is disproportionate enough to raise medium-high risk even without signs of overt malware or deceptive installers.