iblai-vibe-security-recon

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned and does not show credential theft, covert exfiltration, or deceptive installs. However, it equips an AI agent with offensive recon and scanning workflows against external targets, which is inherently high-risk even with stated authorization limits; the markdown command findings themselves are benign documentation artifacts.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Sep 10, 2026, 11:27 AM
Package URL
pkg:socket/skills-sh/iblai%2Fvibe%2Fiblai-vibe-security-recon%2F@2fcf3374cbc77edcf99fe66207f7103dd7d7592ed52a1f5ab5493e5c2b9a4cae