Web Fetch

• Analyzed: Mar 31, 2026, 9:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: 72b32355c325407fe02d1a73350ebaad7c153b83674f3d7ff3eeb4d8e21f9e36
• Source: palm
• External report: View on VirusTotal

Findings (1)

The shikamaru-web-fetch skill is a standard utility for retrieving web content and converting it into markdown, plain text, or HTML. The fetch.js script uses native Node.js APIs to perform HTTP requests with reasonable safety constraints, such as a 5MB response size limit and a maximum 120-second timeout. While the script allows saving images to a user-specified path via the --output flag, this behavior is clearly documented in SKILL.md and aligns with the tool's stated purpose without evidence of malicious intent or obfuscation.