osint-methodology

SUSPICIOUS: this is not confirmed malware, but it is a high-risk offensive security skill. Its stated purpose matches its capabilities, yet those capabilities materially enable AI-driven reconnaissance, user enumeration, stealth/cover behavior, and phishing preparation; the third-party `go install ...@latest` command adds medium supply-chain risk. No clear credential exfiltration endpoint or hidden payload is present, so this is better classified as a vulnerable/high-risk offensive skill than malicious malware.