security-audit

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/VULNERABLE rather than malicious. The skill is internally consistent as a security-audit guide and does not show credential theft, covert exfiltration, or deceptive installs, but it materially increases risk by equipping an AI agent with active security testing and scanning capabilities against external targets.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Aug 4, 2026, 07:30 PM
Package URL
pkg:socket/skills-sh/cosmicstack-labs%2Fmercury-agent-skills%2Fsecurity-audit%2F@787a6a49cb1c1898ba3783c3decc4d61185c23eaf08a3ef566e0f096ff23f048
Security Audit — socket — security-audit