skills/uphiago/recon-skills/controller/Socket

controller

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is coherent with its stated Hermes controller purpose, but that purpose is to enable high-autonomy offensive recon/redteam operations over SSH workers with approval bypass and scheduled execution. The main risk is not hidden exfiltration; it is deliberate AI-agent security tooling, autonomous scanning, and elevated operational scope.

Confidence: 90%Severity: 88%

Audit Metadata

Analyzed At

Jul 26, 2026, 04:37 PM

Package URL

pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fcontroller%2F@79985da894531b209ac1789dae738a6e8aef19150cf471abddac909f4b0340ec