ssti
Warn
Audited by Socket on Jul 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS/HIGH-RISK offensive security skill. Its stated purpose matches its behavior, but that behavior is exploitation-focused: it installs third-party tooling from GitHub, teaches RCE and shell payloads, and uses known OOB callback endpoints. Not malware by itself, but dangerous and unsuitable for broad agent execution without strict authorization and containment.
Confidence: 94%Severity: 90%
Audit Metadata