nikto

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in publisher/data-flow coherence but HIGH RISK in operational impact: this is a legitimate Nikto reference skill whose capabilities match its purpose, yet that purpose is to give an AI agent offensive web-scanning ability including evasion and exploit-focused checks. No clear credential theft, malware, or deceptive routing is present, but the skill meaningfully increases misuse risk.

Confidence: 93%Severity: 82%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fnikto%2F@b5d0bfa593a14cba770138d0474c583553cdd9e6ad79bb4ae7eed3670adc5527
Security Audit — socket — nikto