john

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. The content is internally consistent with John the Ripper usage and shows no obvious exfiltration or malicious installer, but it gives an AI agent offensive password-cracking capability against local secrets and protected files. This is better classified as a high-risk security/exploit tool than malware.

Confidence: 94%Severity: 84%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fjohn%2F@367a62feeb3fa5937498d1e38741908bddd30ecfa331f6398d2887d014b4d50e
Security Audit — socket — john