penetration-tester-master

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent with its stated purpose, but that purpose is to give an AI agent end-to-end offensive security capability, including exploitation, privilege escalation, persistence, and data exfiltration. There is no clear credential-harvesting or deceptive installer behavior in the provided text, so this is not confirmed malware, but it is a high-risk offensive-agent skill.

Confidence: 93%Severity: 91%
Audit Metadata
Analyzed At
Aug 11, 2026, 06:55 AM
Package URL
pkg:socket/skills-sh/dokhacgiakhoa%2Fagent-skills-4-vibe-coding-cli%2Fpenetration-tester-master%2F@72dd5f9ab6433713f48f34157c3035021b070ab02bc93c72bde1c2e1d35b2eeb
Security Audit — socket — penetration-tester-master