kernel-dev-skill

Warn

Audited by Socket on Apr 14, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
references/lectures/debugging-slides.md

This file contains an intentionally destructive kernel fault trigger: on module load it unconditionally writes to a hardcoded invalid address (0x42), which would reliably cause a kernel oops/crash (DoS). No exfiltration, persistence, or stealth indicators are present in the visible code. Treat as unsafe for production/supply-chain dependency contexts unless strictly confined to a controlled lab.

Confidence: 74%Severity: 83%
SecurityMEDIUM
references/so2/lec9-debugging-slides.md

The fragment is clearly instructional kernel debugging/training material that intentionally triggers severe kernel faults (invalid write to hardcoded address, memory corruption via use-before-init/use-after-free/buffer overflow, and unsafe locking patterns). While it is highly dangerous for system stability (if loaded on a real kernel), the provided code shows no supply-chain malware indicators such as networking, credential theft, persistence, or obfuscation; malware likelihood from this excerpt is low/unclear, but execution would be a serious security/availability risk.

Confidence: 62%Severity: 72%
Audit Metadata
Analyzed At
Apr 14, 2026, 09:00 AM
Package URL
pkg:socket/skills-sh/aresbit%2FMateBot%2Fkernel-dev-skill%2F@99e8338ad64053c6299897abd9819d837e838776
Security Audit — socket — kernel-dev-skill