ssh-key-scanner

Fail

Audited by Socket on Sep 5, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill’s actual footprint is an offensive credential-hunting and persistence playbook: it harvests SSH and password material, uses it for lateral movement, supports exfiltration via scp, and instructs key injection for backdoor access. These capabilities are fundamentally incompatible with a normal defensive SSH audit/remediation skill.

Confidence: 96%Severity: 96%
Audit Metadata
Analyzed At
Sep 5, 2026, 10:45 PM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fssh-key-scanner%2F@313f97d0db539ec39de184b6dffb2fd1d81d5918171e30429ce0b6f436057ed9
Security Audit — socket — ssh-key-scanner