linkfox-temu-returns-refunds-us

SUSPICIOUS. The skill's business purpose is coherent, and no installer or overt malware pattern is shown, but all Temu operations and credentials are routed through a LinkFox intermediary instead of official Temu endpoints. That third-party credential forwarding is disproportionate enough to raise meaningful security risk even though the publisher/domain relationship appears legitimate.