set

Fail

Audited by Socket on Apr 16, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. This skill is purpose-built for phishing, credential theft, and exploit/payload delivery, with explicit instructions to clone real login pages, intercept submitted credentials, and send spear-phishing emails. Install provenance is mostly same-org and only a secondary concern; the primary issue is that the skill’s core functionality is inherently abusive and unsafe for an AI agent.

Confidence: 97%Severity: 99%
Audit Metadata
Analyzed At
Apr 16, 2026, 08:23 PM
Package URL
pkg:socket/skills-sh/AeonDave%2Fmalskill%2Fset%2F@0c3379c5b9d28706c44e517b5989a7db12be1214
Security Audit — socket — set