skills/adinvadim/2captcha-cli/2captcha/Socket

2captcha

Warn

Audited by Socket on Jun 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent for 2Captcha integration, but its core function is CAPTCHA bypass for automation and it installs/runs credentialed third-party code from a personal GitHub repo via transitive skill-install paths. Data flows to 2Captcha are disclosed and expected, so this is not confirmed malware, but it is a high-risk skill with notable supply-chain and misuse concerns.

Confidence: 87%Severity: 76%

Audit Metadata

Analyzed At

Jun 5, 2026, 06:26 AM

Package URL

pkg:socket/skills-sh/adinvadim%2F2captcha-cli%2F2captcha%2F@9172a18e4182a51d18bcdd1f4fc81c79fb1782fe