hunt-xxe

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK offensive security skill. Its footprint is coherent with its stated purpose, but that purpose is to help an AI agent exploit XXE on arbitrary live targets using OOB exfiltration, SSRF, file theft, and possible RCE chains. There is little supply-chain risk, but the operational security risk is high due to explicit exploitation and exfiltration guidance.

Confidence: 96%Severity: 88%
Audit Metadata
Analyzed At
Aug 24, 2026, 11:04 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2Fclaude-bughunter%2Fhunt-xxe%2F@4972403cdd06dabecb1a662aa6f4d5541c9a9ce8f675d3eaf85f708816fd7eb5
Security Audit — socket — hunt-xxe