debug-fetcher

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is coherent for a fetch-debugging skill, but its footprint is broader than a simple fetch wrapper: it routes requests through third-party services, may collect human credentials, persists learned/human-provided data, and delegates to other skills. No clear credential theft or overt malware is shown, so this is not confirmed malicious, but the data-flow and trust-chain surface make it a medium-risk skill.

Confidence: 79%Severity: 58%
Audit Metadata
Analyzed At
Mar 17, 2026, 06:42 AM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fdebug-fetcher%2F@c830410143ec22674838b00cb778ad110e6b2efe
Security Audit — socket — debug-fetcher