fsop-dev

Warn

Audited by Socket on Nov 13, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

The skill is internally consistent and contains no evident malware or data exfiltration. However, it directly equips an AI agent to develop memory-corruption exploits and achieve code execution, making its security risk high.

Confidence: 98%Severity: 82%
SecurityMEDIUM
references/triggers-and-call-paths.md

This fragment is prose providing actionable glibc FSOP exploitation guidance, including an input-buffer arbitrary-write technique and a route to system/RCE. It contains no executable implementation, network indicators, or credentials, so this fragment alone does not establish malware in the package; its exploit-enablement content nevertheless presents a high security concern.

Confidence: 98%Severity: 82%
Audit Metadata
Analyzed At
Nov 13, 2026, 12:37 PM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Ffsop-dev%2F@e91522cbe6ec183e9c230257a91d9cafcf1945f518e9aab6ad9343e65e6c9f68