penetration-testing

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally consistent, but its explicit purpose is to equip the agent for offensive security work. With no guardrails, authorization checks, or scope limits, it presents high security risk despite no evidence of malware, exfiltration, or supply-chain abuse in the provided text.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:26 PM
Package URL
pkg:socket/skills-sh/ffsshhttiikk%2Fopencode-agents-skills%2Fpenetration-testing%2F@290227e74c14b33c99bb86f657856902915b0b7fc86ef8965a6da42299ede964
Security Audit — socket — penetration-testing