osint

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s invasive capabilities largely match its stated OSINT purpose, but the purpose itself demands disproportionate access: private local communications, broad third-party data sharing, autonomous multi-agent scraping, and offensive recon features. It is not confirmed malware, but it is a high-risk surveillance skill with significant privacy, exfiltration, and prompt-injection exposure.

Confidence: 89%Severity: 88%
Audit Metadata
Analyzed At
Jul 20, 2026, 06:47 AM
Package URL
pkg:socket/skills-sh/assafkip%2Fhuntkit%2Fosint%2F@79828e0c752ad4c10c2f60067ba4d4485fe37cef8b57959320330e6de9be7746
Security Audit — socket — osint