linkfox-temu-returns-refunds-global
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's functional scope matches Temu returns/refunds operations, and there is no clear malware or installer abuse in the provided files. However, it routes Temu credentials and request data through LinkFox gateway endpoints instead of Temu's official API host, making the intermediary a man-in-the-middle for sensitive tokens and after-sales data; local token/response persistence adds moderate exposure.
Confidence: 84%Severity: 62%
Audit Metadata