hunt-business-logic

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent as a business-logic bug-hunting guide, but it gives an AI agent offensive security playbooks for probing real external systems. There is no malicious install path, no credential harvesting, and no hidden exfiltration, yet the capability itself is high-risk because it operationalizes exploit discovery and abuse techniques against targets.

Confidence: 95%Severity: 78%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:48 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-business-logic%2F@bcbffb13a2ed22f9d532ef0a696d27a5eb7e427d4c6df3b4fdbc6d985db67875