performing-osint-with-spiderfoot
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is coherent with its stated purpose and uses a legitimate SpiderFoot project, but that purpose is to give an AI agent autonomous reconnaissance/OSINT capability against targets. Install trust is mostly acceptable for same-project sources, while the main risk comes from offensive-security functionality, sensitive result handling, and optional cloud data routing via SpiderFoot HX.
Confidence: 86%Severity: 78%
Audit Metadata