api-security-tester

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally coherent and not overtly malicious: its capabilities match its stated API security testing purpose, and no credential exfiltration or suspicious third-party routing is shown. However, it is a high-risk offensive-security skill for an AI agent, capable of active probing and abuse testing against live targets, so it should be treated as dangerous tooling rather than benign general automation.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Oct 11, 2026, 12:02 PM
Package URL
pkg:socket/skills-sh/1ikeadragon%2Fawesome-offsec-claude%2Fapi-security-tester%2F@206295a5b1c329159e6b564031acf0ae668989341ddc3d47476b7881a3fa881e