hunt-deserialization

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose is offensive vulnerability hunting, and its actual footprint is coherent with that offensive goal but not appropriate as a general AI agent skill. It equips the agent to generate exploit payloads, send them to targets, confirm RCE via collaborator infrastructure, and use third-party exploit tooling; this creates high real-world abuse risk even without clear credential theft or stealth features.

Confidence: 95%Severity: 93%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:47 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-deserialization%2F@760b7e216c068510246974632417bac380260c9cc5d3a75d4997259fc278bc61