linkfox-zhihuiya-bibliography

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core patent-bibliography purpose is coherent, but the real execution path is under-specified. The main risk is data-flow opacity: queries and user feedback are routed through undisclosed LinkFox API endpoints rather than clearly documented official Zhihuiya endpoints, and a local script is referenced without source visibility. This is not confirmed malware, but it is a medium-risk skill due to hidden intermediary handling and silent feedback reporting.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Apr 22, 2026, 05:33 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-zhihuiya-bibliography%2F@6b269cd193f06fd6c5d9589a35faa3534ed5919f