passive-recon

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
references/search-engine-syntax.md

该片段是网络资产测绘和侦察操作指南,未发现软件包恶意载荷或直接的系统破坏行为。其主要风险在于将资产发现与无认证访问、弱密码及默认凭据尝试结合,可能支持未授权侦察和入侵。API 凭据应避免通过 URL 传递,并仅对明确授权的目标使用这些查询。

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 23, 2026, 03:32 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fpassive-recon%2F@c1693b3010cbd6aaa40b9d30ff43cd183ef744bb3bae258d0d272bd032488a5e