skills/drolu/agent-skills/pywinrm/Socket

pywinrm

Fail

Audited by Socket on Jul 2, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

MALICIOUS. While remote Windows administration matches the stated purpose, the skill embeds exposed admin credentials for public IPs and instructs insecure WinRM settings that disable core protections. Its real footprint combines credential disclosure, weakened transport security, and broad remote-control capability, making it unsafe to use.

Confidence: 97%Severity: 99%

Audit Metadata

Analyzed At

Jul 2, 2026, 07:12 PM

Package URL

pkg:socket/skills-sh/DrOlu%2Fagent-skills%2Fpywinrm%2F@d8dbedee630dac1be1f44c1fd530c1f7eaad9fc80b0699115828a0cbf2095449