linkfox-zhihuiya-pdf-data
Warn
Audited by Socket on Aug 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core purpose is coherent, and its parameters match Zhihuiya’s patent-PDF function, but data and credentials flow through a LinkFox intermediary rather than directly to the official Zhihuiya API. The hidden gateway plus mandatory local response logging and unspecified feedback reporting create medium security risk, though there is no strong evidence of outright malware.
Confidence: 84%Severity: 58%
Audit Metadata