pwntools

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The install path is largely benign and verifiable, but the skill’s actual purpose is to equip an AI agent with offensive security and exploitation capabilities: arbitrary network interaction, process execution, shellcode/ROP workflows, SSH command execution, and listener setup. That footprint is coherent with the stated purpose, so this is not deceptive malware, but it is still high-risk as an AI-agent skill because it enables penetration-testing/exploit behavior with real system and network effects.

Confidence: 95%Severity: 82%
Audit Metadata
Analyzed At
Sep 5, 2026, 10:44 PM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fpwntools%2F@023ffb50eae143f61d3bf61b95a907173a127ae4e98f8bc1cd838b05e4a3f95e
Security Audit — socket — pwntools