osint-tools-mcp-server

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s behavior matches its stated OSINT purpose, but that purpose is itself a high-impact AI-enabled reconnaissance workflow. The main issue is proportionate but elevated supply-chain and execution trust risk from installing and running multiple unpinned third-party tools, plus broad external data collection capability. No direct credential harvesting, covert exfiltration, or deceptive routing is shown in the provided content.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:35 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fosint-tools-mcp-server%2F@0341088ec1d455983147eee61d1530bfa97ac61f767852f55a9bcbbd5938df6e
Security Audit — socket — osint-tools-mcp-server