osint-email

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core HIBP and DNS behavior is consistent with an email OSINT skill, but the optional holehe installation/execution expands scope through a separate third-party reconnaissance tool and increases supply-chain and privacy risk. Data flows are mostly proportionate and go to expected endpoints, yet the skill is still risky because it automates social-account enumeration for recon purposes.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
Sep 28, 2026, 11:19 AM
Package URL
pkg:socket/skills-sh/woohyun212%2Fsecurity-skill%2Fosint-email%2F@97a4ae6e09bfb86143c7fc93624422a1fb9704aadaea7d4dc4996919894932d5