debugging

Fail

Audited by Socket on Aug 2, 2026

2 alerts found:

SecurityMalware
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent as a debugging guide, but its footprint expands into high-risk offensive security territory by directing an AI agent to reverse engineer binaries and use exploit-adjacent tooling. There is no clear credential theft, exfiltration, obfuscation, or malicious installer behavior in the provided content, so this is better classified as a high-risk vulnerable skill than malware.

Confidence: 83%Severity: 72%
MalwareHIGH
references/tools/pwntools.md

This code fragment is an exploit-oriented pwntools harness that leaks libc information from a local target, constructs a ROP chain to invoke libc system('/bin/sh'), and enters an interactive session to access a shell-like capability. It also writes crash diagnostics to /tmp and supports gdb-based debugging. No network exfiltration or stealth techniques are evident in the snippet, but the explicit shell-spawning capability makes it a high-risk supply-chain concern if shipped as part of a general-purpose package or invoked outside an explicit testing/CTF context.

Confidence: 70%Severity: 85%
Audit Metadata
Analyzed At
Aug 2, 2026, 04:49 PM
Package URL
pkg:socket/skills-sh/code-yeongyu%2Foh-my-opencode%2Fdebugging%2F@e3274ed2f819279ebb8f11ba96a6598b110d9ffa601a3f9ff705c808d796c7a3
Security Audit — socket — debugging