ctf-osint — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  fail

  This skill provides a set of tools and techniques for Open Source Intelligence (OSINT) within CTF environments. It installs common security utilities and queries numerous external APIs for information. A security scanner detected a known malicious URL associated with botnet activity in the documentation examples. Furthermore, the skill's workflow involves processing untrusted external data from sources like DNS records and social media posts, creating a potential surface for indirect prompt injection attacks.

  Risk: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONApr 17, 2026Full report

• Socket

  pass

  No alerts

  Apr 17, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 1 issue

  Risk: MEDIUMApr 17, 2026Full report

• Runlayer

  fail

  4/4 files flagged

  Risk: HIGHMar 16, 2026Full report

• ZeroLeaks

  pass

  1 finding · Score: 86/100

  Risk: LOWApr 15, 2026Full report