fsop-dev
Warn
Audited by Socket on Nov 13, 2026
2 alerts found:
Securityx2SecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is internally consistent and contains no evident malware or data exfiltration. However, it directly equips an AI agent to develop memory-corruption exploits and achieve code execution, making its security risk high.
Confidence: 98%Severity: 82%
Securityreferences/triggers-and-call-paths.md
MEDIUMSecurityMEDIUM
references/triggers-and-call-paths.md
This fragment is prose providing actionable glibc FSOP exploitation guidance, including an input-buffer arbitrary-write technique and a route to system/RCE. It contains no executable implementation, network indicators, or credentials, so this fragment alone does not establish malware in the package; its exploit-enablement content nevertheless presents a high security concern.
Confidence: 98%Severity: 82%
Audit Metadata