security-assessment

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally aligned with a security-assessment purpose, but it gives an AI agent high-risk offensive testing capability and delegates core actions to undefined sub-skills with unverified provenance. No direct malware or credential-theft behavior is shown, but the autonomy and transitive-trust footprint make it high security risk.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Oct 2, 2026, 12:19 PM
Package URL
pkg:socket/skills-sh/bleedingdev%2Fagentic-security-workspace%2Fsecurity-assessment%2F@ab442d20b5369a93bc59582f97961ef9eca3de3634087263f59ec12942e1ee17