hunt-cloud-misconfig

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s footprint is coherent with its stated purpose, but that purpose is to equip an AI agent with offensive cloud reconnaissance and exploitation techniques. Install trust is mostly acceptable, yet the overall skill is high risk because it enables credential theft, SSRF-based metadata access, RCE-oriented validation, and real-world network actions against external targets.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Aug 24, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fhunt-cloud-misconfig%2F@69bb9defb4352f51a2ffe0dc5a1cf815a1b9bb18e8e3cfe427321dc46507523b
Security Audit — socket — hunt-cloud-misconfig