Security audit
Security checks across malware telemetry and agentic risk
This skill is privacy-sensitive OSINT tooling, but its behavior is disclosed, user-directed, and aligned with its stated identity-monitoring purpose.
Install only if you understand that this runs third-party OSINT tools and sends searched emails, usernames, phone numbers, or other identifiers to external services. Use it only for your own identities or authorized investigations, expect rate limits and terms-of-service constraints, and run it in an isolated environment after reviewing the pip packages.
def scan_email(email):
try:
result = subprocess.run(['holehe', email, '--only-used'], capture_output=True, text=True)
raw_lines = result.stdout.split('\n')
registered = [
line.replace("[+]", "").strip()def scan_username(username):
try:
result = subprocess.run(['sherlock', username, '--timeout', '1'], capture_output=True, text=True)
found = [line.split(': ')[1] for line in result.stdout.split('\n') if 'http' in line]
return json.dumps({"target": username, "profiles": found})
except Exception as e:65/65 vendors flagged this skill as clean.
No suspicious patterns detected.