pentest-shodan-helper

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent and uses an expected official CLI workflow, but it gives an AI agent offensive reconnaissance capability via Shodan. This is not confirmed malware, yet it is a high-risk security skill due to pentest/search enablement and trusted local command execution.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Jul 8, 2026, 08:15 AM
Package URL
pkg:socket/skills-sh/crtvrffnrt%2Fskills%2Fpentest-shodan-helper%2F@e73be606404037d600b5be2b128685ff5a8c44e1530ac2240e93a2405c5ca252
Security Audit — socket — pentest-shodan-helper