ClawHub
Back to skill

Security audit

Fathom

Security checks across malware telemetry and agentic risk

Overview

This Fathom skill is not malicious, but it needs review because its webhook command can create ongoing forwarding of private meeting content to any HTTPS URL the user supplies.

Install only if you are authorized to access the Fathom meetings exposed by the API key. Do not run the webhook setup unless you control the destination endpoint, understand its retention and access controls, and are comfortable with ongoing delivery of transcripts, summaries, and action items. Protect and rotate the Fathom API key, especially if stored in ~/.fathom_api_key.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Findings (7)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill clearly requires shell and network access to call external APIs and run helper scripts, but it does not declare any permissions or capability boundaries. Missing permission declarations reduce transparency and can cause the skill to be invoked in contexts where users or orchestration layers are not aware that external requests and local shell execution will occur.

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding
The stated purpose focuses on fetching recordings, transcripts, and summaries, but the skill also documents webhook registration that can send meeting-derived data to an arbitrary external HTTPS endpoint. That expands behavior from read-only retrieval into data forwarding/exfiltration, which is materially more sensitive and could surprise users or bypass expected review.

Description-Behavior Mismatch

High
Confidence
94% confidence
Finding
The script adds functionality that goes beyond the stated skill purpose of fetching/searching prior meetings: it registers a webhook that causes future meeting data to be pushed to an arbitrary external endpoint. Because the payload can include transcripts, summaries, and action items for multiple recording scopes, this materially expands data exposure and creates an exfiltration path for sensitive meeting content.

Context-Inappropriate Capability

High
Confidence
96% confidence
Finding
This code configures Fathom to deliver meeting content to a user-specified external URL, including transcripts, summaries, and action items. In the context of a skill described as retrieving or searching meeting history, that outward data flow is unnecessary and dangerous because it can silently copy sensitive organizational conversations to third-party infrastructure.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
This skill handles highly sensitive meeting content, including transcripts, summaries, and action items, but it provides no privacy warning or consent guidance. Users may not realize that using the skill involves transmitting and retrieving potentially confidential conversation data through a third-party API.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The script tells the operator that a webhook will be registered, but it does not clearly warn that enabling it can forward sensitive meeting transcripts, summaries, and action items to an external service. This is a meaningful privacy and compliance risk because users may enable the feature without understanding that confidential call content will be continuously exported.

Session Persistence

Medium
Category
Rogue Agent
Content
### 1. Get Your API Key
1. Go to [developers.fathom.ai](https://developers.fathom.ai)
2. Create an API key
3. Copy the key (format: `v1XDx...`)

### 2. Configure
Confidence
84% confidence
Finding
Create an API key 3. Copy the key (format: `v1XDx...`) ### 2. Configure ```bash # Option A: Store in file (recommended) echo "YOUR_API_KEY" > ~/.fathom_api_key chmod 600 ~/.fathom_api_key

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.