graphql-and-hidden-parameters

Warn

Audited by Socket on Sep 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill: its footprint is coherent with its stated purpose, but that purpose is to equip the agent for offensive security testing against APIs. There is no clear malware behavior, credential theft, or suspicious installer path in this text, yet the skill materially increases the agent's ability to probe authorization flaws and hidden functionality on live targets.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Sep 26, 2026, 02:02 AM
Package URL
pkg:socket/skills-sh/gmh5225%2Fhack-skills%2Fgraphql-and-hidden-parameters%2F@21c6ed188d64159aa2b97eb4516dd910672af0a6e1780cf78c9171812153f5f2