9router-web-fetch
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill's behavior matches its stated web-fetch purpose, and the examples are documentation rather than hidden execution. Main risk is architectural: it centralizes URL fetching and credentialed access through a configurable 9Router gateway instead of official provider APIs, so users must trust the operator of NINEROUTER_URL with request data and delegated upstream access. This is better classified as suspicious/medium-risk integration trust, not malware.
Confidence: 90%Severity: 55%
Audit Metadata