performing-osint-with-spiderfoot

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose and uses a legitimate SpiderFoot project, but that purpose is to give an AI agent autonomous reconnaissance/OSINT capability against targets. Install trust is mostly acceptable for same-project sources, while the main risk comes from offensive-security functionality, sensitive result handling, and optional cloud data routing via SpiderFoot HX.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 03:56 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-osint-with-spiderfoot%2F@165f3dcc71e5f4fb24cb98318e0be9e25cdd7124da82a4761c4704c556bacb8e