capability-primitive-search
Warn
Audited by Socket on Sep 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS/HIGH-RISK skill. The main concern is not hidden malware but explicit offensive enablement: it equips an AI agent to search for and chain vulnerabilities into RCE and lateral movement. No direct exfiltration or malicious installer is shown, but the transitive npx skill install and clearly attack-oriented purpose make this inappropriate for general agent use.
Confidence: 89%Severity: 78%
Audit Metadata