fathom

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities mostly align, and there is no malware-like installer behavior. However, it is a managed proxy integration that routes Fathom credentials/context and sensitive meeting data through Maton domains rather than Fathom's official API, and it supports arbitrary outbound webhook destinations. This is coherent with the advertised managed OAuth model but higher-trust and higher-risk than a direct official API integration.

Confidence: 89%Severity: 63%
Audit Metadata
Analyzed At
May 14, 2026, 12:15 AM
Package URL
pkg:socket/skills-sh/CraftOS-dev%2FCraftBot%2Ffathom%2F@00b63750e0ed43104ff8d22eaea2878019be79b4
Security Audit — socket — fathom