security-audit

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/VULNERABLE rather than malicious. The skill is internally consistent as a security-audit guide and does not show credential theft, covert exfiltration, or deceptive installs, but it materially increases risk by equipping an AI agent with active security testing and scanning capabilities against external targets.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Aug 4, 2026, 07:30 PM
Package URL
pkg:socket/skills-sh/cosmicstack-labs%2Fmercury-agent-skills%2Fsecurity-audit%2F@787a6a49cb1c1898ba3783c3decc4d61185c23eaf08a3ef566e0f096ff23f048