linkfox-walmart-search
Warn
Audited by Socket on Oct 17, 2026
1 alert found:
AnomalyAnomalyscripts/walmart_search.py
LOWAnomalyLOW
scripts/walmart_search.py
This code implements a Walmart search API client with response caching and local session logging. It sends request parameters and the configured API key to the configured gateway, normally `https://tool-gateway[.]linkfox[.]com`; a modified `LINKFOX_TOOL_GATEWAY` can redirect that traffic. Unvalidated `SESSION_ID` can cause directory and `_meta.json` writes outside the intended session directory, so this is a filesystem security risk; no clear malware behavior is evident.
Confidence: 97%Severity: 57%
Audit Metadata