linkfox-walmart-search

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/walmart_search.py

This code implements a Walmart search API client with response caching and local session logging. It sends request parameters and the configured API key to the configured gateway, normally `https://tool-gateway[.]linkfox[.]com`; a modified `LINKFOX_TOOL_GATEWAY` can redirect that traffic. Unvalidated `SESSION_ID` can cause directory and `_meta.json` writes outside the intended session directory, so this is a filesystem security risk; no clear malware behavior is evident.

Confidence: 97%Severity: 57%
Audit Metadata
Analyzed At
Oct 17, 2026, 03:11 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-walmart-search%2F@d84136b80fc42899c878c9b4e3e12d7ef8c89fd9c4868c21f03da0ffc294d64b