hunt-jwt-crypto

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its behavior is internally aligned with its purpose, but that purpose is to equip the agent with offensive JWT exploitation and admin-takeover workflows. No direct malware or credential theft is shown, yet the skill materially increases the agent's ability to attack live targets and perform harmful authenticated actions.

Confidence: 93%Severity: 90%
Audit Metadata
Analyzed At
Aug 24, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fhunt-jwt-crypto%2F@eff81bd862f4f117bab9f8f46186bb59e1cd759933405ade2c84d4822f646574
Security Audit — socket — hunt-jwt-crypto