recon-daycare

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive recon against daycare sites handling minors' PII, and its actual behavior matches that purpose by automating enumeration, sensitive-data collection, and attack-chain development. There is little supply-chain risk, but the exploitation guidance, local exfil workflow, and disabled TLS checks make it unsuitable and dangerous for general AI-agent use.

Confidence: 95%Severity: 93%
Audit Metadata
Analyzed At
Jul 9, 2026, 05:21 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Frecon-daycare%2F@3ae07d23af623939f00f7c8ed974b994fbcbe15044071e256364b462cd11e623
Security Audit — socket — recon-daycare