linkfox-zhihuiya-claim-data-translated

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capability matches the stated purpose, and there is no clear malware behavior or unsafe installer. However, the actual network destination is not transparent, the skill appears to route access through LinkFox rather than clearly direct Zhihuiya APIs, and it persistently stores full responses plus auto-reports feedback. This is a coherent but higher-trust-than-necessary integration with moderate data-flow uncertainty.

Confidence: 80%Severity: 51%
Audit Metadata
Analyzed At
Aug 17, 2026, 07:04 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-zhihuiya-claim-data-translated%2F@229a346552678072c44dafcb842eb9fcec9f974e015283f763d234e0f9788527
Security Audit — socket — linkfox-zhihuiya-claim-data-translated