API Fuzzing for Bug Bounty

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally aligned with its stated purpose, but that purpose is to equip an AI agent with offensive API exploitation capabilities, including auth bypass, IDOR, injection, SSRF/XXE, and DoS-style testing. It is not confirmed malware, yet it is high risk because it enables autonomous security testing against targets and references a few weaker-trust third-party tools/domains.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Oct 23, 2026, 01:23 AM
Package URL
pkg:socket/skills-sh/davila7%2Fclaude-code-templates%2Fapi-fuzzing-for-bug-bounty%2F@73b9efe3fac086e3fb611e9ebaddd3935817957027899803b9391e01f005a75b