chaos-engineer

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Security
SecurityMEDIUM
references/infrastructure-chaos.md

Best report: Report 2 is the most balanced overall. Improved summary: This dependency is a chaos-engineering toolkit that intentionally performs high-impact disruption (AWS instance termination, ASG scaling suspension, ELB target deregistration, stress-ng/iperf3 saturation, and Pumba container kills and netem impairments). It does not show classic malware behaviors (no exfiltration/persistence/backdoors), but it carries substantial operational risk if used outside a tightly controlled testing environment. Additionally, DNSChaos.block_domain uses sudo sh -c with interpolated `domain`, creating a potential command-injection vector if input is not strictly validated.

Confidence: 78%Severity: 74%
Audit Metadata
Analyzed At
Mar 27, 2026, 07:25 AM
Package URL
pkg:socket/skills-sh/Coopyrightdmin%2Fclaude-skills%2Fchaos-engineer%2F@ce6c41d90c01685ba513cfd1d78e948bd2a45f01