inveigh

Fail

Audited by Socket on Sep 5, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill is an offensive credential-harvesting and network-poisoning playbook for AI-agent execution. Its capabilities align with Inveigh’s attacker use case, but that use case itself is high risk: it enables interception of victim authentication, storage of captured secrets, and follow-on cracking/relay from a compromised host. Provenance is also incomplete because the skill author differs from the apparent upstream tool publisher and no official install path is embedded.

Confidence: 95%Severity: 98%
Audit Metadata
Analyzed At
Sep 5, 2026, 10:45 PM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Finveigh%2F@077877273cc90cb70285420607cc1172f55f1873de912b2c1c68b90999b6229e
Security Audit — socket — inveigh