Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrow threat-intelligence lookup API wrapper, with expected external indicator submission and no hidden execution or persistence behavior found.
Reasonable to install for SOC or threat-hunting use, but do not submit internal-only, regulated, customer-sensitive, or embargoed indicators unless your organization is comfortable sending them to the listed external API and any downstream intelligence sources it may query.
The skill explicitly states it aggregates data across public and proprietary threat feeds, but it does not warn users that submitted indicators will be transmitted to third-party services. In a security investigation context, indicators can themselves be sensitive investigative artifacts, so silently sharing them can leak incident details, customer data, or internal detection activity.
The skill is designed to send user-supplied indicators to an external API endpoint, which constitutes data egress to a third-party service. In this context, the danger is not the mere presence of a URL, but that potentially sensitive threat-hunting artifacts may leave the organization without an explicit trust boundary disclosure or handling restrictions.
## References
- **Kong Route:** `https://api.mkkpro.com/security/threat-intel-v2`
- **API Docs:** `https://api.mkkpro.com:8011/docs`
No suspicious patterns detected.