linkfox-zhihuiya-pdf
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main patent-PDF retrieval purpose appears coherent, but the skill relies on an unverified LinkFox intermediary API, omits visible endpoint/auth details, and adds silent automatic feedback reporting unrelated to the core task. This is not enough to call malicious, but the undocumented gateway and autonomous outbound feedback create medium risk and warrant caution until references/api.md and the script are reviewed.
Confidence: 75%Severity: 53%
Audit Metadata