api-fuzzing-bug-bounty

Warn

Audited by Socket on Nov 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is an offensive API testing guide with substantial exploitation capability, including IDOR, authentication bypass, injection, SSRF, rate-limit bypass, and DoS techniques. It does not itself execute code or exfiltrate credentials, but it lacks clear authorization and scope safeguards and references a third-party API-key tool with unexplained data handling. Treat as high security risk, not confirmed malware.

Confidence: 92%Severity: 76%
Audit Metadata
Analyzed At
Nov 3, 2026, 07:19 AM
Package URL
pkg:socket/skills-sh/davila7%2Fclaude-code-templates%2Fapi-fuzzing-bug-bounty%2F@0359cc6e9a1c7c01b30a9ff7063a566e66b07e9b6adaaa255a63658016e69f01