recon-solar-installers

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated red-team recon purpose, but that purpose itself gives an AI agent offensive security capability against external websites. There is no strong sign of malware or credential harvesting by the skill author, yet the operational security risk is high because it automates hostile reconnaissance and disables TLS checks during probing.

Confidence: 94%Severity: 83%
Audit Metadata
Analyzed At
Jul 9, 2026, 05:21 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Frecon-solar-installers%2F@5ba42b84420fe5f2d97cdb6c077f08c708fd85dca0e625b50ed69fa0fcd40617
Security Audit — socket — recon-solar-installers