dirsearch

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent and uses an official install source, but its purpose is to give an AI agent offensive web-enumeration capability. The main risk is not malware or credential theft; it is enabling autonomous security scanning/brute-forcing of external systems.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Apr 16, 2026, 08:22 PM
Package URL
pkg:socket/skills-sh/AeonDave%2Fmalskill%2Fdirsearch%2F@a6631bc6a5a95ddc68a27bbff57eb0bd8e0813bb
Security Audit — socket — dirsearch