hunt-auth-bypass

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is coherent with its stated purpose, but that purpose is to equip an AI agent with offensive authentication-bypass testing techniques against live systems. There is no clear malware behavior, hidden exfiltration, or suspicious installer path, yet the exploit-focused capabilities, command examples, token replay guidance, and brute-force tactics make it a high-risk security skill rather than a benign developer helper.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Aug 24, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fhunt-auth-bypass%2F@c6a7c950e1972e4c68965974dba9bb0b5bf65ef291b4b24696f389395896aa0f
Security Audit — socket — hunt-auth-bypass