donut
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is internally consistent with Donut’s real purpose and uses mostly official install sources, but that purpose is to help an AI agent generate shellcode and support injection/AMSI-bypass workflows. This makes it a high-risk offensive security capability rather than confirmed malware.
Confidence: 93%Severity: 90%
Audit Metadata