debugging
Audited by Socket on Aug 9, 2026
2 alerts found:
SecurityMalwareSUSPICIOUS: the skill is coherent as a debugging guide, but its actual footprint extends into high-risk security tooling and reverse engineering for an AI agent. No clear credential theft or exfiltration is present, yet the capability set is broader and more dangerous than a typical debugging helper.
This code fragment is an exploit-oriented pwntools harness that leaks libc information from a local target, constructs a ROP chain to invoke libc system('/bin/sh'), and enters an interactive session to access a shell-like capability. It also writes crash diagnostics to /tmp and supports gdb-based debugging. No network exfiltration or stealth techniques are evident in the snippet, but the explicit shell-spawning capability makes it a high-risk supply-chain concern if shipped as part of a general-purpose package or invoked outside an explicit testing/CTF context.