skills/0xghostcat/claude-ai-cyber-security-skills/file-upload/Socket

file-upload

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

High-risk offensive security skill. Its behavior is internally aligned with its stated purpose, but that purpose is to help an AI agent actively exploit file upload vulnerabilities, including RCE/XSS/XXE/path traversal and data exfiltration patterns. No major supply-chain concern is present, but the exploit capability makes the skill unsafe.

Confidence: 92%Severity: 86%

Audit Metadata

Analyzed At

Jul 11, 2026, 10:42 AM

Package URL

pkg:socket/skills-sh/0xGhostCAT%2Fclaude-ai-cyber-security-skills%2Ffile-upload%2F@81bd0f9cb05df3f2351181a1b1472b1c0b3e6aa376aa40c517ead33d455ec2ad