linkfox-zhihuiya-pdf-data

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, and its parameters match Zhihuiya’s patent-PDF function, but data and credentials flow through a LinkFox intermediary rather than directly to the official Zhihuiya API. The hidden gateway plus mandatory local response logging and unspecified feedback reporting create medium security risk, though there is no strong evidence of outright malware.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Aug 17, 2026, 07:04 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-zhihuiya-pdf-data%2F@6056ee8517ab401d1b192556a9a27b7a1dbac4864a2c66f624c9f22a96dd5dcf
Security Audit — socket — linkfox-zhihuiya-pdf-data