web-security-testing

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the wrapper is internally consistent as a pentesting workflow, but it is a high-risk offensive-security skill that delegates to multiple third-party child skills, creating significant transitive-trust and misuse exposure. No direct malware or exfiltration is present in this file, but its real-world testing scope and third-party skill chaining make it unsafe to classify as benign.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Sep 20, 2026, 09:57 AM
Package URL
pkg:socket/skills-sh/davila7%2Fclaude-code-templates%2Fweb-security-testing%2F@85f1cb6beafec47c9b5bba09365d7c20255a861322bd87433f683a2ffaf421ac
Security Audit — socket — web-security-testing