subdomain-takeover

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent for subdomain takeover hunting, but its purpose is inherently offensive and includes active exploitation using external accounts and credentials. Tool provenance is mostly legitimate, yet the overall footprint is high risk because it equips an AI agent to claim third-party resources and serve attacker-controlled content on victim subdomains.

Confidence: 93%Severity: 87%
Audit Metadata
Analyzed At
Jul 11, 2026, 10:42 AM
Package URL
pkg:socket/skills-sh/0xGhostCAT%2Fclaude-ai-cyber-security-skills%2Fsubdomain-takeover%2F@9adb7d22fbde09560befc99e27da34894a88ea58c34e644ee4f22ec39de77906