http-smuggling

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as an HTTP smuggling hunting guide, but its actual footprint is a high-risk offensive security skill that enables active exploitation, possible user traffic hijack, and installation of an unpinned third-party tool. Not malware by itself, but dangerous and inappropriate for broadly trusted agent execution.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Jul 11, 2026, 10:43 AM
Package URL
pkg:socket/skills-sh/0xGhostCAT%2Fclaude-ai-cyber-security-skills%2Fhttp-smuggling%2F@d07f57f765a9885abf037dacb67c359ebd205a931d1e28baeb9743ad8e1b24ad