hunt-mfa-bypass

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as an MFA-bypass hunting guide, but its actual footprint is an offensive security playbook for AI agents. It enables brute force, auth-flow bypass, race testing, and ATO chaining against real targets, and it encourages combining with other skills. Install provenance is mostly acceptable and there is no clear credential-harvesting gateway, so this is not confirmed malware, but it is high-risk and disproportionate for general agent use.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Aug 24, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fhunt-mfa-bypass%2F@550388a9c88e9f6b119a4e434c1c75284780380c08e29e3f78509740fc24668f
Security Audit — socket — hunt-mfa-bypass