hunt-deserialization
Warn
Audited by Socket on Nov 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s stated purpose is offensive vulnerability hunting, and its actual footprint is coherent with that offensive goal but not appropriate as a general AI agent skill. It equips the agent to generate exploit payloads, send them to targets, confirm RCE via collaborator infrastructure, and use third-party exploit tooling; this creates high real-world abuse risk even without clear credential theft or stealth features.
Confidence: 95%Severity: 93%
Audit Metadata