cicd-security

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent with its stated CI/CD security purpose, but that purpose is itself an offensive security capability for an AI agent. Its footprint is high risk because it teaches exploitation and exfiltration paths, invokes external scanners via an unseen installer script, and combines untrusted target content with shell-based analysis. Not confirmed malware, but unsafe to grant broadly.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Aug 27, 2026, 10:34 AM
Package URL
pkg:socket/skills-sh/awarexone%2Fagentic-bug-hunter%2Fcicd-security%2F@3ccd1646dc5c008988ee3f0bf27248611fc134652a7282018b4ffda7fa202fe5
Security Audit — socket — cicd-security