gophish

Fail

Audited by Socket on Apr 16, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: the install source is largely coherent and official, but the skill’s stated purpose is to help an AI agent run phishing and credential-harvesting campaigns. That is a high-risk offensive capability with real-world abuse potential, including outbound email attacks and collection of victim credentials.

Confidence: 97%Severity: 96%
Audit Metadata
Analyzed At
Apr 16, 2026, 08:22 PM
Package URL
pkg:socket/skills-sh/AeonDave%2Fmalskill%2Fgophish%2F@991cb58464642a555176020bf7c5a8792eeec67d
Security Audit — socket — gophish