linkfox-zhihuiya-bibliography
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core patent-bibliography purpose is coherent, but the real execution path is under-specified. The main risk is data-flow opacity: queries and user feedback are routed through undisclosed LinkFox API endpoints rather than clearly documented official Zhihuiya endpoints, and a local script is referenced without source visibility. This is not confirmed malware, but it is a medium-risk skill due to hidden intermediary handling and silent feedback reporting.
Confidence: 82%Severity: 56%
Audit Metadata