osint-ctf

SUSPICIOUS. The skill broadly enables OSINT plus offensive-recon techniques, and it can route user-provided tokens to external services. Data flows mostly go to official/public endpoints and the only explicit installer is an official documented package, so this is not confirmed malware; however, the scope is somewhat disproportionate for a generic OSINT skill because it mixes passive research with active recon tooling and token-based API enumeration.