9router-web-fetch

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill's behavior matches its stated web-fetch purpose, and the examples are documentation rather than hidden execution. Main risk is architectural: it centralizes URL fetching and credentialed access through a configurable 9Router gateway instead of official provider APIs, so users must trust the operator of NINEROUTER_URL with request data and delegated upstream access. This is better classified as suspicious/medium-risk integration trust, not malware.

Confidence: 90%Severity: 55%
Audit Metadata
Analyzed At
Sep 15, 2026, 01:44 PM
Package URL
pkg:socket/skills-sh/decolua%2F9router%2F9router-web-fetch%2F@9be0915ee4f5cf1d098bb2242cc800b024441635e2060542396ae5d92781809f