debugging
Audited by Socket on Aug 2, 2026
2 alerts found:
SecurityMalwareSUSPICIOUS: the skill is coherent as a debugging guide, but its footprint expands into high-risk offensive security territory by directing an AI agent to reverse engineer binaries and use exploit-adjacent tooling. There is no clear credential theft, exfiltration, obfuscation, or malicious installer behavior in the provided content, so this is better classified as a high-risk vulnerable skill than malware.
This code fragment is an exploit-oriented pwntools harness that leaks libc information from a local target, constructs a ROP chain to invoke libc system('/bin/sh'), and enters an interactive session to access a shell-like capability. It also writes crash diagnostics to /tmp and supports gdb-based debugging. No network exfiltration or stealth techniques are evident in the snippet, but the explicit shell-spawning capability makes it a high-risk supply-chain concern if shipped as part of a general-purpose package or invoked outside an explicit testing/CTF context.