skills/gsfsss/claude-bughunter/hunt-csrf/Socket

hunt-csrf

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent as an offensive CSRF-hunting playbook and shows no installer, credential-harvesting, or third-party proxy abuse. However, it equips an AI agent to conduct authenticated exploitation and live offensive testing against web targets, which is a high-risk capability for an agent skill.

Confidence: 93%Severity: 84%

Audit Metadata

Analyzed At

Nov 12, 2026, 05:48 PM

Package URL

pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-csrf%2F@330336f6f963816541c988898fd2b1dd0cd8f2d4