wsdiscovery

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent and same-org sourced, with no clear credential theft or third-party data routing, so it is not malicious. However, it equips an AI agent with active network scanning/enumeration functionality against local devices, which is a high-risk offensive capability even though it matches the skill’s purpose.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:07 AM
Package URL
pkg:socket/skills-sh/brownfinesecurity%2Fiothackbot%2Fwsdiscovery%2F@a8ab33ae7b22d8cdf10118a5a6f00b5e10753ca9898c742aa533081a18b4da69