eyewitness

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent and does not show credential theft or covert exfiltration, but it equips an AI agent with network reconnaissance and active screenshotting/fingerprinting capabilities against web/RDP/VNC targets. The main risk is offensive security use and unattended scanning, not hidden malware behavior.

Confidence: 89%Severity: 76%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:57 AM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Feyewitness%2F@e879dfc509e729492f6adafd6ff33935b9e5a399964557a112134e6e3f379eda
Security Audit — socket — eyewitness