fetch-webpage

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the actual data flow routes arbitrary webpage requests and content through third-party Markdown proxy services instead of performing direct local retrieval/conversion. There is no clear credential theft or payload execution, yet the intermediary network design creates avoidable privacy and prompt-injection risk for a simple fetch skill.

Confidence: 88%Severity: 61%
Audit Metadata
Analyzed At
Apr 11, 2026, 12:40 AM
Package URL
pkg:socket/skills-sh/xream%2Fscripts%2Ffetch-webpage%2F@0977bd388fb565adc57b05b1db97ea7fc124693a