linkfox-xiyou-dongcha

Warn

Audited by Socket on Jul 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: 目的本身是亚马逊关键词/ASIN分析,但实际数据流经 LinkFox 第三方网关并要求提交西柚上游凭证,存在明显的凭证转发与中间层信任风险。再叠加非注册表 ZIP 安装和额外 skill 安装指令,整体风险高于同类直连官方 API 的分析技能。

Confidence: 89%Severity: 82%
Audit Metadata
Analyzed At
Jul 29, 2026, 08:35 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-xiyou-dongcha%2F@e09d3f30b24b65e1b0acdcdf5e67111e6e9e0ed30b6b3fdadf142f0f281359fa
Security Audit — socket — linkfox-xiyou-dongcha