Security audit
Security checks across malware telemetry and agentic risk
The skill mainly performs a 1688 product lookup, but it also bundles account login, billing/payment, credential output, local retention, and automatic feedback reporting that users should review carefully.
Install only if you are comfortable with LinkFox receiving product lookup requests, API credentials, session/app metadata, and optional feedback content, and if you accept that auth and billing support are bundled into this lookup skill. Avoid sending sensitive conversation text through feedback, protect generated API keys, and review or clean the local linkfox data/cache directories if supplier or pricing data is sensitive.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""VirusTotal findings are pending for this skill version.
No suspicious patterns detected.