lazagne

Fail

Audited by Socket on Sep 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill is built around credential harvesting and includes an explicit remote download-and-execute example from an attacker host over HTTP. Even though LaZagne is a real upstream tool, this skill’s footprint and usage guidance are fundamentally incompatible with a benign agent skill.

Confidence: 96%Severity: 99%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Flazagne%2F@1af5b59db9c22e5721b6c8da8113dc4a690797c589f93262f6f7e28ac696a68e
Security Audit — socket — lazagne