ntlm-relay-coercion
Warn
Audited by Socket on Sep 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS/HIGH-RISK. The skill is internally consistent as an offensive security playbook, but its purpose is to equip the agent with credential-relay, coercion, and privilege-escalation tradecraft against Windows/AD targets. The main risk is not hidden exfiltration but explicit attack enablement and expansion into additional offensive skills.
Confidence: 94%Severity: 92%
Audit Metadata