skills/0xghostcat/claude-ai-cyber-security-skills/xss/Socket

xss

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent as an XSS exploitation guide, but its actual footprint is high risk because it equips an AI agent with offensive security capabilities and includes explicit data-exfiltration and account-impact PoCs. Tool provenance is mixed: Dalfox looks official, while XSStrike usage relies on weaker source-checkout trust.

Confidence: 90%Severity: 84%

Audit Metadata

Analyzed At

Jul 11, 2026, 10:43 AM

Package URL

pkg:socket/skills-sh/0xGhostCAT%2Fclaude-ai-cyber-security-skills%2Fxss%2F@f4952f5e37d0eec05465232997bb1bf1911870a7a401a1a6704e44aa2050b8b6