hunt-graphql

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK. The skill is internally consistent as an offensive GraphQL hunting playbook, but that stated purpose itself gives an AI agent broad exploit capability against arbitrary targets. Mixed-provenance third-party tools, token forwarding, and transitive skill chaining further increase risk. This is not confirmed malware, but it is a high-risk offensive security skill.

Confidence: 91%Severity: 88%
Audit Metadata
Analyzed At
Aug 24, 2026, 11:04 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fhunt-graphql%2F@d6d6af37f9d1f42152bea6bbb7e60896469b2a6d6b3b0b0fa7409569f0ec55e5
Security Audit — socket — hunt-graphql