red-run-ctf

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a red-team/CTF orchestrator, but its actual footprint is inherently high risk because it equips an AI agent to coordinate offensive security operations, spawn technique skills, handle credentials/access, and drive real target interaction. The flagged shell commands are not strong malware evidence, and there is no clear covert exfiltration or deceptive credential routing in the provided text.

Confidence: 89%Severity: 86%
Audit Metadata
Analyzed At
Oct 5, 2026, 03:50 PM
Package URL
pkg:socket/skills-sh/blacklanternsecurity%2Fred-run%2Fred-run-ctf%2F@36b940ae1b722fe2f098e5fb2b3003659e45b7dbb6e261bc43c7d2daf291328f