person-osint

Warn

Audited by Socket on Aug 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is person-focused OSINT, and the actual footprint matches that goal, but the goal itself is high-risk: it aggregates sensitive personal data, encourages recursive pivots across many public sources, and relies on multiple unpinned external skills. There is no clear credential theft or hidden payload here, so this is not confirmed malware, but it presents meaningful misuse, privacy, and transitive trust risk.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Aug 2, 2026, 09:31 AM
Package URL
pkg:socket/skills-sh/useosint%2Fosint-skills%2Fperson-osint%2F@5cde44b801c37cfe683b10f90b877ad29b07b125d407f1013912b0178d8fcd05
Security Audit — socket — person-osint