linkfox-zhihuiya-abstract-data-translated

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core patent-translation purpose is coherent, but the skill expands beyond that purpose by auto-persisting results, auto-sending feedback, and especially by instructing transitive installation of a remote ZIP-based onboarding skill with weak provenance. Main risk is supply-chain and trust-chain expansion rather than confirmed malicious exfiltration.

Confidence: 85%Severity: 81%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:10 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-zhihuiya-abstract-data-translated%2F@40986a5b4498a939c6134a4a9e8b475da2a828a0166e2961a275843a87d5c760