source-leak-hunt

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is offensive mass reconnaissance and credential harvesting from external targets. There is little evidence of malware or deceptive install behavior, yet the capability set is high-risk and disproportionate for a general AI agent because it automates sensitive scanning, leak collection, and secret extraction at scale.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:50 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fsource-leak-hunt%2F@b863a7d227d8b0c738f86cc695f5db37f9da3475cffaf9cda21aae6049d304ca
Security Audit — socket — source-leak-hunt