fathom

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose and requested credential are broadly aligned with a Fathom meetings integration, and there is no installer or obvious malware behavior in the provided text. The main concern is data-flow integrity: the skill tells users to configure the Fathom API key via a third-party gateway, which means both credentials and sensitive meeting data may traverse infrastructure not clearly identified as Fathom’s official API path.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 31, 2026, 11:01 PM
Package URL
pkg:socket/skills-sh/TechNickAI%2Fopenclaw-config%2Ffathom%2F@b45dd5c231a4a394814b234b771b0e54d76c4a5c
Security Audit — socket — fathom