email-finder

Fail

Audited by Socket on Feb 17, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Installation of third-party script detected The documented 'email-finder' tool implements standard, dual-use techniques to discover and verify emails (web scraping, search dorking, pattern guessing, DNS inspection, SMTP RCPT verification). From the documentation alone there are no explicit signs of malware, hardcoded secrets, or obfuscation, but active SMTP probing and search scraping are invasive behaviors that can trigger anti-abuse systems, violate service TOS, and expose collected personal data if not handled securely. Final safety determination requires review of the actual implementation. Use cautiously: for targeted lookups with rate limits and no persistent remote exfiltration it is acceptable; for bulk harvesting it is high risk and may be abusive.

Confidence: 98%Severity: 90%
Audit Metadata
Analyzed At
Feb 17, 2026, 12:25 PM
Package URL
pkg:socket/skills-sh/psyduckler%2Fopenclaw-sales-skills%2Femail-finder%2F@634d40ab914ea8d8859648069fd168615cede664