m365-entra-attack

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its attack, enumeration, and credential-validation capabilities are aligned with its stated red-team purpose, but that purpose itself gives an AI agent powerful real-world intrusion functionality. No clear third-party credential exfiltration or malware behavior is shown, yet TLS bypasses, autonomous auth attempts, and attack-skill chaining make the overall risk high.

Confidence: 94%Severity: 90%
Audit Metadata
Analyzed At
Jul 22, 2026, 08:26 PM
Package URL
pkg:socket/skills-sh/elementalsouls%2FClaude-BugHunter%2Fm365-entra-attack%2F@b63777200ca87ed0fa14e422dfb62e088b70d44e00d07ce1acab5e2da11125fe
Security Audit — socket — m365-entra-attack