agent-fathom
Warn
Audited by Socket on Aug 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Purpose and capabilities are largely aligned with a Fathom meeting-management skill, and the documentation shows strong awareness of sensitive data handling and prompt-injection risks. The main issue is trust: the skill depends on local CLI binaries that are not verifiable from the provided material, and those binaries receive Fathom credentials and sensitive meeting content. That makes the skill high security risk despite no clear evidence of confirmed malicious intent.
Confidence: 83%Severity: 82%
Audit Metadata