ffuf

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is to equip an AI agent with active web fuzzing and brute-force style security testing capabilities. Install trust is relatively good and there is no obvious credential exfiltration path, yet the offensive nature, support for authenticated fuzzing, recursion, and optional TLS bypass make the overall skill high risk for misuse.

Confidence: 91%Severity: 81%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:57 AM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fffuf%2F@ae27a201a561bcafbf87b3cd03c07f1edd05e20ebb68ef23a4009caa7d270f5a
Security Audit — socket — ffuf