HTML Injection Testing

Fail

Audited by Socket on Sep 14, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill’s stated purpose is offensive exploitation, and its actual content centers on phishing, credential capture, defacement, and exfiltration to attacker-controlled endpoints. There are no unusual install-trust issues, but the operational behavior and data flows are clearly designed for abuse rather than legitimate developer assistance.

Confidence: 98%Severity: 97%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:19 AM
Package URL
pkg:socket/skills-sh/googyosoo%2Fantigravity-skills%2Fhtml-injection-testing%2F@fd8248e61bfaf7d301cdf171e91d80483644b2bd
Security Audit — socket — HTML Injection Testing