hunt-file-upload

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: This is an offensive file-upload exploitation skill with instructions for RCE, SSRF, XXE, data theft, and chaining additional skills. The examples could be legitimate in an authorized security assessment, but the skill does not enforce authorization or scope, and includes an unpinned tool installation. No definitive malicious intent or pre-execution behavior is established.

Confidence: 94%Severity: 82%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:48 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-file-upload%2F@5a836ac9cb23bcc867876b88ca8a696bb7054c56722278be7b1c9f7b0e47e8da