mqtt-pwn

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally consistent with its stated purpose: an MQTT offensive assessment framework from the official project source. It is not confirmed malware, but it is a high-risk capability because it equips an AI agent to brute-force brokers, inspect sensitive IoT data, and run MQTT-based C2/actions with possible physical-world impact.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Sep 5, 2026, 10:45 PM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fmqtt-pwn%2F@692f02f2c7ce3ac0fb3d449445cbff79977d89d3af07b72714776171dee41a75
Security Audit — socket — mqtt-pwn