ai-powered-pentesting

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent in purpose, but its purpose is to assist offensive security and autonomous pentesting, which is itself high risk for an AI agent. The only external fetch is a mutable GitHub Raw markdown source from a personal repo; this is a moderate content-trust concern, but there is no installer, credential forwarding, or clear exfiltration behavior. High security risk, low evidence of malware.

Confidence: 93%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 10:12 AM
Package URL
pkg:socket/skills-sh/gmh5225%2Fawesome-ai-security%2Fai-powered-pentesting%2F@15b2d8f0261126063ffa5f4359e5b6b24f0effd12f9584426a590e1cbd901f28