nuclei

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned for authorized vuln scanning, but it materially expands the agent into offensive security activity. No clear credential theft or malicious data routing is present; main risk is enabling active network scanning via an external tool with modest install-trust concerns.

Confidence: 88%Severity: 79%
Audit Metadata
Analyzed At
Oct 2, 2026, 12:19 PM
Package URL
pkg:socket/skills-sh/bleedingdev%2Fagentic-security-workspace%2Fnuclei%2F@1812a9e4e6bbc6bda581f1968412d565e5e9fe6312850c62afaeb86559447741