passive-recon

Warn

Audited by Socket on May 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

该技能与其声明用途基本一致，主要调用官方 OSINT/测绘接口，未见可疑安装链、凭证窃取或第三方中转，因而不像恶意技能。但它明确赋予 AI 代理被动侦察与目标识别能力，属于高敏感度的攻防工具类技能，应视为高安全风险、非确认恶意。

Confidence: 90%Severity: 76%

Audit Metadata

Analyzed At

May 16, 2026, 09:55 PM

Package URL

pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fpassive-recon%2F@5ac1482bfb14b2a6962caebc239d152f60b567bc