security-skills-guide
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is coherent as a security-skills directory, but its purpose is to help an agent discover offensive-security and other third-party skills, which is inherently high risk for AI agents. It does not itself install tools, read credentials, or exfiltrate data, so this is not confirmed malware; the main concerns are offensive capability enablement, transitive skill trust, and fetching mutable external content.
Confidence: 89%Severity: 74%
Audit Metadata