openosint-ai-osint-framework

SUSPICIOUS. The skill is internally coherent as an OSINT framework, and most data flows go to expected official services, so this is not confirmed malware. However, it gives an AI agent meaningful reconnaissance capability, executes multiple external tools, uses a multi-hop trust chain including a downloaded binary, and sends investigation data to outside APIs/model providers; that makes it high security risk for an agent skill.