github-secret-hunting

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its purpose is offensive secret discovery and validation against live services, which is disproportionate for a normal developer-assistance skill and directly enables credential abuse. Data flows mostly go to official APIs, but the combination of attack-oriented recon, secret verification, TLS bypass, and third-party tool execution makes the overall skill high risk rather than benign.

Confidence: 93%Severity: 86%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:51 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fgithub-secret-hunting%2F@6be22cfb1625a37c4aec4c09bbc44d9d9ef50ae192042e3d8cc55796e5bf9448
Security Audit — socket — github-secret-hunting