recon-roofing

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated purpose and capabilities are internally consistent, but that purpose is offensive security recon against external roofing-company targets, including PII discovery and exploit-oriented bypass guidance. There is no installer or third-party credential-forwarding risk, yet the skill materially increases an agent's ability to scan and abuse real websites, and it disables TLS verification during probing.

Confidence: 94%Severity: 86%
Audit Metadata
Analyzed At
Jul 9, 2026, 05:21 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Frecon-roofing%2F@9812cb4a5246cae4c03d0116d745477a221c402d68571f62a0f59a543606cc0b
Security Audit — socket — recon-roofing