threat-intelligence
Warn
Audited by Socket on Sep 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core OSINT purpose is largely aligned with the stated capabilities, and the Xquik endpoints appear official for that service. However, the skill forwards credentials and queries to an independent third-party intermediary and includes bootstrap execution through unverifiable local scripts from a personal-repo lineage, creating medium supply-chain and trust risk disproportionate to a pure documentation skill.
Confidence: 83%Severity: 54%
Audit Metadata