linkfox-zhihuiya-description-data-translated

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core capability matches the stated purpose, and there is no evidence of malware-style install or execution behavior. The main concern is data-flow integrity: authentication and patent-response traffic appear to be mediated by LinkFox rather than clearly going straight to official Zhihuiya endpoints, plus the skill stores full responses locally by default and auto-reports feedback. Risk is moderate, driven by opaque routing and persistence rather than overt malicious behavior.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Aug 17, 2026, 07:04 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-zhihuiya-description-data-translated%2F@128aefd30a1d094877f39cfbb884338348aaca014a0e8f6a7cca179a5b755169
Security Audit — socket — linkfox-zhihuiya-description-data-translated