debugging

Fail

Audited by Socket on Aug 9, 2026

2 alerts found:

SecurityMalware
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent as a debugging guide, but its actual footprint extends into high-risk security tooling and reverse engineering for an AI agent. No clear credential theft or exfiltration is present, yet the capability set is broader and more dangerous than a typical debugging helper.

Confidence: 82%Severity: 74%
MalwareHIGH
references/tools/pwntools.md

This code fragment is an exploit-oriented pwntools harness that leaks libc information from a local target, constructs a ROP chain to invoke libc system('/bin/sh'), and enters an interactive session to access a shell-like capability. It also writes crash diagnostics to /tmp and supports gdb-based debugging. No network exfiltration or stealth techniques are evident in the snippet, but the explicit shell-spawning capability makes it a high-risk supply-chain concern if shipped as part of a general-purpose package or invoked outside an explicit testing/CTF context.

Confidence: 70%Severity: 85%
Audit Metadata
Analyzed At
Aug 9, 2026, 12:44 PM
Package URL
pkg:socket/skills-sh/code-yeongyu%2Flazycodex%2Fdebugging%2F@f43a537392c91c795c3e4e7772ba2e734f95895f972c8d57746e69f0fd8a2d4b
Security Audit — socket — debugging