hunt-cicd

Fail

Audited by Socket on Nov 12, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill is an offensive CI/CD exploitation playbook for an AI agent: it directs active RCE, credential dumping, secret harvesting, external exfiltration, runner takeover, and privileged cloud-role abuse. While some referenced tools are legitimate, the skill’s actual data flows and effects are fundamentally incompatible with a benign defensive helper.

Confidence: 96%Severity: 98%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:47 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-cicd%2F@795bcd98c2dec06b34ef519306d9837613060043f8701d5f2dea20c29c06eda0