open-tor
Fail
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/setup.pyscript usessubprocess.runto install Python dependencies fromrequirements.txtand check for the presence of the Tor binary on the system. - [COMMAND_EXECUTION]: The
scripts/torcore.pymodule utilizessubprocess.Popenwithin theTorPoolclass to manage and spawn multiple local Tor daemon processes for increased scraping throughput. - [COMMAND_EXECUTION]: The
SKILL.mdfile instructs the agent to request sudo permissions from the user for administrative tasks such as installing the Tor package or starting the system service. - [EXTERNAL_DOWNLOADS]: The skill is primarily designed to fetch and process content from external sources across the Tor network, utilizing a transport layer in
scripts/torcore.pyto route traffic through SOCKS5 proxies. - [EXTERNAL_DOWNLOADS]: Hardcoded .onion addresses for ransomware group leak sites (ALPHV and LockBit) are included in
scripts/engines.pyas verified research seeds for threat intelligence monitoring. - [DATA_EXFILTRATION]: The
scripts/osint.pymodule implements regex-based entity extraction to identify and collect sensitive artifacts (emails, PGP keys, Bitcoin/Monero/Ethereum addresses, and phone numbers) from scraped web content. - [SAFE]: The skill implements a mandatory content safety filter in
scripts/torcore.pythat scans URLs, titles, and page text for blacklisted tokens associated with illegal content, blocking access at the transport layer. - [SAFE]: The
SKILL.mdestablishes professional OSINT reporting standards, mandating the use of verification labels (e.g., '✓ Observed', '⚡ Inferred') to ensure transparency in the agent's findings. - [SAFE]: The
scripts/setup.pyscript facilitates secure environment configuration by prompting the user for necessary API keys (OpenAI, Anthropic, Gemini) and storing them in a local.envfile rather than hardcoding credentials.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata