api-authorization-and-bola

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the content is coherent as an API authorization testing skill, but it equips an AI agent with offensive security procedures for probing and potentially modifying real APIs. There is no clear exfiltration or malware behavior, yet the operational capability is high risk and inappropriate for broad autonomous use.

Confidence: 91%Severity: 83%
Audit Metadata
Analyzed At
Sep 26, 2026, 02:02 AM
Package URL
pkg:socket/skills-sh/gmh5225%2Fhack-skills%2Fapi-authorization-and-bola%2F@e6ad48ad737c277248210d13350e65731f961b44dade543e602fea8f2a9306f4