ssti

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK offensive security skill. Its stated purpose matches its behavior, but that behavior is exploitation-focused: it installs third-party tooling from GitHub, teaches RCE and shell payloads, and uses known OOB callback endpoints. Not malware by itself, but dangerous and unsuitable for broad agent execution without strict authorization and containment.

Confidence: 94%Severity: 90%
Audit Metadata
Analyzed At
Jul 11, 2026, 10:42 AM
Package URL
pkg:socket/skills-sh/0xGhostCAT%2Fclaude-ai-cyber-security-skills%2Fssti%2F@d2614b0413c6a45df402fd300c9385d7131188d9fa997a273b825cb51ebcca88