pacu

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for an authorized AWS exploitation framework, and its install/data-flow paths appear to use official RhinoSecurityLabs sources rather than unrelated intermediaries. However, it equips the agent with offensive cloud-assessment capability and handles sensitive AWS credentials/session data, so overall risk is high even without clear evidence of malware or deceptive exfiltration.

Confidence: 91%Severity: 74%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fpacu%2F@63a0552bc5ef34568f85ec24da87d8e43e51452fce37d48fe3b4c8ff787f3790
Security Audit — socket — pacu