osint

SUSPICIOUS. The skill is internally coherent as an OSINT/reconnaissance capability, but that purpose is itself high-risk for an AI agent: it enables systematic secret discovery, employee footprinting, and infrastructure intelligence gathering against public targets. No explicit malicious exfiltration or credential harvesting endpoint is shown, yet the broad recon scope, security-tooling nature, and loose external-tool install trust make this a high-risk vulnerable skill rather than confirmed malware.

This fragment is not a benign supply-chain or library code module; it is an actionable offensive reconnaissance/credential-harvesting playbook. Its custom exposed .git dumping/reconstruction routine (including DNS/TLS bypass) and subsequent full-history secret mining create a high-confidence indicator of malicious or unauthorized intent. If present in a supply-chain package, it should be treated as critical and unacceptable behavior (credential exfiltration/data theft enabling).