recon-a-domain-passively

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent as a passive reconnaissance workflow, but it equips an AI agent for structured security recon and relies on many unverified sibling skills plus large amounts of untrusted external content. There is no direct credential harvesting, installer abuse, or explicit exfiltration in this file, so malware likelihood is low while operational security risk is moderate.

Confidence: 85%Severity: 66%
Audit Metadata
Analyzed At
Aug 3, 2026, 03:39 PM
Package URL
pkg:socket/skills-sh/useosint%2Fosint-skills%2Frecon-a-domain-passively%2F@cc659d7cf645bbf0736acd8626e75d552331b2bd3af5af7df6e37eea59446b38
Security Audit — socket — recon-a-domain-passively