bug-bounty

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent with its stated purpose as a bug-bounty/offensive-security orchestrator, but that purpose itself grants an AI agent high-risk exploit, exfiltration, and reconnaissance capability. It also processes untrusted external content while encouraging command execution and routes to additional offensive skills, making it unsafe for general deployment even though it is not confirmed malware.

Confidence: 94%Severity: 90%
Audit Metadata
Analyzed At
Sep 15, 2026, 01:18 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fbug-bounty%2F@02a0ea292df664c47b4d89cf9c8eaefe217968fa0c0f680af4922f365fed43b2