gobuster

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent, but its actual function is to equip an AI agent with offensive security scanning and brute-force enumeration capabilities. There is no clear exfiltration or fake publisher routing, yet the combination of attack-oriented usage, optional credential forwarding, and TLS-skip support makes overall operational risk high.

Confidence: 92%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fgobuster%2F@980325ffe956bfc5a996e64d42f346e361cf9175a05b9af2c4abac564597c86c
Security Audit — socket — gobuster