agent-fathom

Warn

Audited by Socket on Aug 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are largely aligned with a Fathom meeting-management skill, and the documentation shows strong awareness of sensitive data handling and prompt-injection risks. The main issue is trust: the skill depends on local CLI binaries that are not verifiable from the provided material, and those binaries receive Fathom credentials and sensitive meeting content. That makes the skill high security risk despite no clear evidence of confirmed malicious intent.

Confidence: 83%Severity: 82%
Audit Metadata
Analyzed At
Aug 31, 2026, 09:41 PM
Package URL
pkg:socket/skills-sh/shhac%2Fagent-skills%2Fagent-fathom%2F@a1fc6066d921327642e093ceb4907379532ac268c583a365c1fc22f9052a4cb9
Security Audit — socket — agent-fathom