skills/aeondave/malskill/covenant/Socket

covenant

Fail

Audited by Socket on Apr 16, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS: the skill is internally coherent, but its purpose is to give an AI agent offensive C2, credential-dumping, remote execution, scanning, and file-transfer capabilities. The main risk is the explicit offensive scope and autonomous real-world impact; install-trust concerns are secondary.

Confidence: 95%Severity: 96%

Audit Metadata

Analyzed At

Apr 16, 2026, 08:21 PM

Package URL

pkg:socket/skills-sh/AeonDave%2Fmalskill%2Fcovenant%2F@f745c6120ccf75fe2172a1d59cc66c8867651d68