skills/bleedingdev/agentic-security-workspace/api-security-assessment/Socket

api-security-assessment

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s offensive testing behavior is coherent with its stated API pentest purpose, so this is not disguised malware, but it is a high-risk security skill. Main concerns are AI-enabled active scanning plus reliance on unspecified slash-command wrappers and possible credential forwarding to external tools without provenance or pinning.

Confidence: 87%Severity: 82%

Audit Metadata

Analyzed At

Oct 2, 2026, 12:19 PM

Package URL

pkg:socket/skills-sh/bleedingdev%2Fagentic-security-workspace%2Fapi-security-assessment%2F@0b5da1aadca22faed3f50fcbf6afd2465916989ed870f6be9fae86cf6b1442aa