fathom
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s purpose and requested credential are broadly aligned with a Fathom meetings integration, and there is no installer or obvious malware behavior in the provided text. The main concern is data-flow integrity: the skill tells users to configure the Fathom API key via a third-party gateway, which means both credentials and sensitive meeting data may traverse infrastructure not clearly identified as Fathom’s official API path.
Confidence: 84%Severity: 58%
Audit Metadata