Broken Authentication Testing

Warn

Audited by Socket on Nov 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is coherent with its stated purpose, but that purpose is to give an AI agent offensive authentication-testing capability. There is no obvious hidden exfiltration endpoint or suspicious installer, yet the skill enables brute force, credential stuffing, MFA bypass, and session hijacking techniques with real-world impact. Classified as SUSPICIOUS due to high-risk offensive security functionality for an agent.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Nov 1, 2026, 11:35 PM
Package URL
pkg:socket/skills-sh/chrissargent48%2Fantigravity-awesome-skills%2Fbroken-authentication-testing%2F@2be1a4288efa1403bfc6a1104b39a5e28ea09f7c7d6c33b584c00480d351c502