surface-recon

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its behavior, but that purpose is high-risk. It equips an AI agent to perform reverse-engineering and reconnaissance on external targets, captures sensitive authenticated traffic, and loads additional skills transitively. The main issue is offensive capability and broad external-content handling rather than clear malware or deceptive credential theft.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Aug 25, 2026, 01:58 AM
Package URL
pkg:socket/skills-sh/crafter-station%2Fskills%2Fsurface-recon%2F@9e12364302b748cbc9073ee8c768ed2f1a25085e7b6cca27adfb6a34ca49c984
Security Audit — socket — surface-recon