api-security-testing

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is not deceptive about its purpose, but it equips an AI agent for offensive API security testing and chains into multiple external skills, creating high misuse and transitive-trust risk. The main concerns are offensive-security enablement and third-party skill/install trust, not confirmed malware or direct data exfiltration in this file.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Sep 15, 2026, 01:32 PM
Package URL
pkg:socket/skills-sh/davila7%2Fclaude-code-templates%2Fapi-security-testing%2F@d3f294d1449d4071babbcc623106ee888e9f54e36d3e98a74f95f4c19ad19595
Security Audit — socket — api-security-testing