security-skills-guide

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent as a security-skills directory, but its purpose is to help an agent discover offensive-security and other third-party skills, which is inherently high risk for AI agents. It does not itself install tools, read credentials, or exfiltrate data, so this is not confirmed malware; the main concerns are offensive capability enablement, transitive skill trust, and fetching mutable external content.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Oct 1, 2026, 03:53 PM
Package URL
pkg:socket/skills-sh/gmh5225%2Fawesome-skills%2Fsecurity-skills-guide%2F@22662dec80c1fdc3727831d0e28730bfbe6369a3ff488a814e017ee1f6591573