re-analyze

Warn

Audited by Socket on Oct 8, 2026

2 alerts found:

SecurityAnomaly
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent as a reverse-engineering orchestrator, but its scope is inherently high risk because it equips an AI agent for malware analysis, cracking, and vulnerability workflows. No direct credential theft or exfiltration is shown in this entry file, yet the required local script execution and reliance on many unseen downstream skills create meaningful transitive and execution-trust risk.

Confidence: 84%Severity: 72%
AnomalyLOW
references/anti-dynamic-workflow.md

No direct malicious code or operational dataflows are present in the provided fragment because it is non-executable guidance text. However, it is explicitly a step-by-step, highly actionable methodology to bypass anti-analysis/anti-tamper protections (including integrity and certificate-pinning checks) and to defeat instrumentation/anti-debugging signals. If this content is merely documentation, the main risk is dual-use. If such guidance is packaged alongside or triggers any runtime behavior (e.g., during installation or execution), it warrants deeper investigation for actual hook/evasion code and any additional payloads elsewhere in the dependency.

Confidence: 68%Severity: 60%
Audit Metadata
Analyzed At
Oct 8, 2026, 05:24 PM
Package URL
pkg:socket/skills-sh/dslsdzc%2Frev-skills%2Fre-analyze%2F@ab47b4b44eb930d75d2b2a93563b42963222e3b7182c48ea230b90ec3b8f7c38