markdown-proxy

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core URL-to-Markdown purpose is plausible, but the skill broadens behavior beyond simple fetching by default-saving all content locally and into Obsidian, and it routes arbitrary URLs through third-party proxy services. The flagged install path is medium supply-chain risk rather than clear malware because it uses npm and documented services, but the overall trust and scope are broader than the stated fetch task suggests.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Oct 16, 2026, 11:21 PM
Package URL
pkg:socket/skills-sh/gusibi%2Fskills%2Fmarkdown-proxy%2F@2be0fe1ad31c0c068772c2814f358388238c693bde0e7f3d52b5d32a0b37dfad