hunt-agent-auth-bypass

Warn

Audited by Socket on Nov 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is coherent as an authorization-bypass testing guide, but its runnable exploit probes enable offensive testing against real agent endpoints and transmit a supplied session cookie. Treat as high risk unless use is restricted to authorized targets. No evidence establishes credential theft, concealed behavior, or confirmed malware.

Confidence: 94%Severity: 75%
Audit Metadata
Analyzed At
Nov 2, 2026, 10:16 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-agenthunter%2Fhunt-agent-auth-bypass%2F@c4ea04f6065187f37594f7e85ca0ea6ce187b4d1806a96adc9a6f5dfc54fe27a