felo-web-fetch

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Felo Web Fetch skill presents a coherent capability for URL-to-content extraction with configurable options. The data path goes from user input through a authenticated API to a response returned to the user. This is functionally consistent with the stated purpose. However, there are moderate privacy and credential exposure considerations due to external API calls and potential cookie handling. No evidence of download-execute or credential forwarding to unknown binaries. Overall, the footprint is plausible for its intended purpose but warrants attention to API-key secrecy, cookie data handling, and explicit data retention/policy disclosures.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 01:16 PM
Package URL
pkg:socket/skills-sh/Felo-Inc%2Ffelo-skills%2Ffelo-web-fetch%2F@d550ae1a7b59ee2d91920fb13970a03e3685cb27