collector-hand-skill

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
HAND.toml

The fragment defines a legitimate but highly privileged autonomous OSINT collector. It contains no clear malware indicators or obfuscated payloads, and its web collection, persistence, scheduling, and alerting are consistent with its stated purpose. Security review is warranted because it can continuously track people or organizations, write persistent intelligence, publish events, and access broad host and network tools. Untrusted webpage content should be isolated from agent instructions, and tool permissions, file scope, authorization, rate limits, and privacy controls should be enforced.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Sep 19, 2026, 06:42 PM
Package URL
pkg:socket/skills-sh/rightnow-ai%2Fopenfang%2Fcollector-hand-skill%2F@18656aab33fa3de8bc3d4aeb152145802ff7f903d59f49e77aec8d2b3b99ffa4