subdomain-takeover
Warn
Audited by Socket on Jul 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally coherent for subdomain takeover hunting, but its purpose is inherently offensive and includes active exploitation using external accounts and credentials. Tool provenance is mostly legitimate, yet the overall footprint is high risk because it equips an AI agent to claim third-party resources and serve attacker-controlled content on victim subdomains.
Confidence: 93%Severity: 87%
Audit Metadata