recon-osint

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent and not clearly malicious, but it is an offensive reconnaissance skill that expands an AI agent's security-testing capability against real organizations. Install/data-flow trust is mostly consistent with official services, yet the overall skill remains high risk because its purpose is attack-surface discovery and secret hunting rather than a normal developer workflow.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Sep 20, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Frecon-osint%2F@dbd1df4b21f457b785d911cfa50f8a4cc58d602fb6ff973e2487c11dd26f54e5
Security Audit — socket — recon-osint