threat-intelligence

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core OSINT purpose is largely aligned with the stated capabilities, and the Xquik endpoints appear official for that service. However, the skill forwards credentials and queries to an independent third-party intermediary and includes bootstrap execution through unverifiable local scripts from a personal-repo lineage, creating medium supply-chain and trust risk disproportionate to a pure documentation skill.

Confidence: 83%Severity: 54%
Audit Metadata
Analyzed At
Sep 4, 2026, 12:45 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fthreat-intelligence%2F@08609a876f328d876bd271b1543199f160ee5620bd8fedb92cb11f788c2aa0f9
Security Audit — socket — threat-intelligence