xxe-xml-external-entity

Fail

Audited by Socket on Sep 26, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. This skill is an offensive exploitation playbook for AI agents: it targets sensitive files, internal services, and external exfiltration channels, and it includes SSRF and RCE chains. While it lacks suspicious installer behavior, its actual purpose and data flows are explicitly harmful and incompatible with benign agent assistance.

Confidence: 97%Severity: 98%
Audit Metadata
Analyzed At
Sep 26, 2026, 02:02 AM
Package URL
pkg:socket/skills-sh/gmh5225%2Fhack-skills%2Fxxe-xml-external-entity%2F@9d2397e0defb998ef37d23c63abeeaedf28890f72423b207b2d4c5da6c294242