API Fuzzing for Bug Bounty

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally aligned with its stated purpose, but that purpose is to equip an AI agent with offensive API exploitation capabilities, including auth bypass, IDOR, injection, SSRF/XXE, and DoS-style testing. It is not confirmed malware, yet it is high risk because it enables autonomous security testing against targets and references a few weaker-trust third-party tools/domains.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:19 AM
Package URL
pkg:socket/skills-sh/googyosoo%2Fantigravity-skills%2Fapi-fuzzing-for-bug-bounty%2F@b49da356b0e98f571cf65e6f0e89788dba35d1d2
Security Audit — socket — API Fuzzing for Bug Bounty