recon-a-domain-passively

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent and does not itself install software, request credentials, or exfiltrate data, but it equips an AI agent for stealthy reconnaissance and attack-surface mapping and chains into many unreviewed companion skills. Risk comes from offensive recon capability and transitive trust, not from confirmed malware in this file.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Aug 24, 2026, 11:54 AM
Package URL
pkg:socket/skills-sh/useosint%2Fskills%2Frecon-a-domain-passively%2F@cc659d7cf645bbf0736acd8626e75d552331b2bd3af5af7df6e37eea59446b38
Security Audit — socket — recon-a-domain-passively