PrivateInvestigator

Warn

Audited by Socket on Mar 5, 2026

1 alert found:

Anomaly
AnomalyLOW
Workflows/FindPerson.md

This document is a detailed, operational workflow for locating individuals using public and third-party data sources. It does not contain code-level malware (no obfuscation, no remote shells, no credential exfiltration code), but it explicitly instructs automated, bulk collection and aggregation of personally identifiable information across many services, which poses a substantial privacy and abuse risk (doxxing, stalking, targeted harassment). If integrated into software or an agent system, strong access controls, consent verification, and usage policies are required. The content should be treated as high-risk from a privacy/ethical standpoint though not demonstrably malicious code.

Confidence: 90%Severity: 60%
Audit Metadata
Analyzed At
Mar 5, 2026, 07:41 AM
Package URL
pkg:socket/skills-sh/steffen025%2Fpai-opencode%2Fprivateinvestigator%2F@bc6ed3c22c854013cce59f4c44dcfda2c54d78ed