web2-vuln-classes

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. This is not a narrow documentation skill; it is an offensive exploit playbook for an AI agent, with explicit exfiltration channels, system-prompt extraction, approval-bypass language, known OAST endpoints, credential/secret targeting, and supply-chain attack workflows. While many snippets are documentary rather than immediately executed, the overall capability set is fundamentally high-risk for an agent skill.

Confidence: 93%Severity: 94%
Audit Metadata
Analyzed At
Sep 17, 2026, 10:03 AM
Package URL
pkg:socket/skills-sh/awarexone%2Fagentic-bug-hunter%2Fweb2-vuln-classes%2F@b099bcb28f7e509c4334ba058dbf247750d63e57a5d265bcf31be13d685ed83f