web-content-fetcher

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is web content fetching, but the skill’s main fallback strategy routes arbitrary URLs through third-party proxy services, which expands data exposure beyond direct retrieval. It is not malware and has no executable installer, but the proxy-based data flow and arbitrary untrusted content handling make it medium risk for privacy leakage and prompt-injection exposure.

Confidence: 88%Severity: 63%
Audit Metadata
Analyzed At
Mar 29, 2026, 08:54 AM
Package URL
pkg:socket/skills-sh/nangongwentian-fe%2Fagent-skills%2Fweb-content-fetcher%2F@9d1f8965ad086036fbd65582933f37c37a4536cc