web2-vuln-classes
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. This is not a narrow documentation skill; it is an offensive exploit playbook for an AI agent, with explicit exfiltration channels, system-prompt extraction, approval-bypass language, known OAST endpoints, credential/secret targeting, and supply-chain attack workflows. While many snippets are documentary rather than immediately executed, the overall capability set is fundamentally high-risk for an agent skill.
Confidence: 93%Severity: 94%
Audit Metadata