markdown-proxy
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core URL-to-Markdown purpose is plausible, but the skill broadens behavior beyond simple fetching by default-saving all content locally and into Obsidian, and it routes arbitrary URLs through third-party proxy services. The flagged install path is medium supply-chain risk rather than clear malware because it uses npm and documented services, but the overall trust and scope are broader than the stated fetch task suggests.
Confidence: 85%Severity: 58%
Audit Metadata