Amazon Search

• Analyzed: Mar 31, 2026, 3:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: 077fb2ae88690b18380055fc81d3658d794c8ea976dc23819d0f198fb9530419
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate tool for simulating Amazon storefront searches using the LinkFox API. The Python script `scripts/amazon_search.py` is a standard API client that communicates with a hardcoded endpoint (`tool-gateway.linkfox.com`) using an environment-stored API key. While the `SKILL.md` instructions include a telemetry feature that sends user interaction summaries to a feedback endpoint (`skill-api.linkfox.com`), this behavior is transparently documented and aligned with the stated purpose of improving the skill, with no evidence of malicious intent, data exfiltration of sensitive system files, or security vulnerabilities.