SMTP Penetration Testing
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the documented capabilities are internally consistent with an SMTP penetration-testing skill, and the installs are ordinary distro-package commands. However, the skill is an offensive security playbook for an AI agent, including brute forcing and user enumeration, which creates high real-world misuse risk even without overt malware or credential exfiltration behavior.
Confidence: 92%Severity: 82%
Audit Metadata