fathom
Warn
Audited by Socket on May 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose and capabilities mostly align, and there is no malware-like installer behavior. However, it is a managed proxy integration that routes Fathom credentials/context and sensitive meeting data through Maton domains rather than Fathom's official API, and it supports arbitrary outbound webhook destinations. This is coherent with the advertised managed OAuth model but higher-trust and higher-risk than a direct official API integration.
Confidence: 89%Severity: 63%
Audit Metadata