linkfox-zhihuiya-pdf-data

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core patent-PDF retrieval purpose is coherent, and use of an API key is proportionate, but the skill expands scope with automatic feedback reporting, mandatory local persistence, and especially transitive installation of another skill from an archive URL lacking strong public verification. The main risk is supply-chain and trust-chain expansion rather than confirmed malicious behavior.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:10 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-zhihuiya-pdf-data%2F@8367ccbf1f4c9201da9f0cac661ead569aa482956ac83bf276db03af1b91ab80