hunt-auth-bypass

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as an auth-bypass hunting playbook, but it gives an AI agent explicit offensive security capabilities to probe and exploit authentication systems. There is no evidence of credential theft, covert exfiltration, or malicious installer behavior, so this is not confirmed malware; the main issue is high operational security risk from enabling automated offensive actions against real targets.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:47 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-auth-bypass%2F@c6a7c950e1972e4c68965974dba9bb0b5bf65ef291b4b24696f389395896aa0f