dns-rebinding-attacks

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s contents are internally consistent with its stated purpose, but that purpose is to equip an AI agent for DNS rebinding attacks, internal service access, and data exfiltration. Install examples are mostly same-org or standard-source references rather than clear malware distribution, so this is not confirmed malware; however, it is high-risk offensive security guidance with explicit exploitation and exfiltration workflows.

Confidence: 93%Severity: 82%
Audit Metadata
Analyzed At
Sep 26, 2026, 02:02 AM
Package URL
pkg:socket/skills-sh/gmh5225%2Fhack-skills%2Fdns-rebinding-attacks%2F@0f7ca6c20dbb5d59b6fb722f2b0acf12a8a810a7c9fe457a1a948ba4e14c38e6