recon-for-sec

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The fragment itself is a benign-looking router with no direct credential access or exfiltration, but its explicit purpose is to enable AI-driven reconnaissance and route into offensive security testing skills. Install provenance appears mostly same-org and source-visible, so malware evidence is low, yet the overall security risk remains high because this skill belongs to a security/exploit workflow and participates in a transitive skill-install ecosystem.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Jul 21, 2026, 01:25 PM
Package URL
pkg:socket/skills-sh/strivepan-svg%2Fhack-skills%2Frecon-for-sec%2F@0df82d3a6a5837a805d78b130c7899139ba2ae65b1532aa025dbf9765e7a2251
Security Audit — socket — recon-for-sec