collector-hand-skill
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalyHAND.toml
LOWAnomalyLOW
HAND.toml
The fragment defines a legitimate but highly privileged autonomous OSINT collector. It contains no clear malware indicators or obfuscated payloads, and its web collection, persistence, scheduling, and alerting are consistent with its stated purpose. Security review is warranted because it can continuously track people or organizations, write persistent intelligence, publish events, and access broad host and network tools. Untrusted webpage content should be isolated from agent instructions, and tool permissions, file scope, authorization, rate limits, and privacy controls should be enforced.
Confidence: 97%Severity: 58%
Audit Metadata