hunt-agent-output-exfil

Warn

Audited by Socket on Nov 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High security risk: the skill provides actionable techniques and a runnable listener for exfiltrating sensitive context through rendered agent output, including CSP/allowlist bypass strategies. No download-execute chain, credential-file access, or confirmed malicious payload is present, so this is a dangerous dual-use testing skill rather than confirmed malware. Use only against authorized targets with synthetic or minimum-necessary test data.

Confidence: 96%Severity: 84%
Audit Metadata
Analyzed At
Nov 2, 2026, 10:15 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-agenthunter%2Fhunt-agent-output-exfil%2F@4255fa63e0c4e8337e15e9e3440f5808fe9135c8