cloud-iam-deep

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. The content is internally consistent with its stated purpose, but that purpose is to equip an AI agent with offensive cloud exploitation, privilege-escalation, SSRF-to-IMDS abuse, and K8s token abuse workflows. There is no hidden exfiltration endpoint or deceptive installer in the provided skill, so this is not confirmed malware; however, it is a high-risk offensive-security capability set that can drive real-world unauthorized actions and forwards sensitive credentials/tokens into cloud CLIs and potentially third-party red-team tools.

Confidence: 95%Severity: 86%
Audit Metadata
Analyzed At
Sep 15, 2026, 01:18 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fcloud-iam-deep%2F@e1c60e129751eb6ded7a6045b3e17d8b4b6a60dd553c1291127c18bfd0ba4546