hunt-jwt-crypto

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its stated purpose is exploitation of JWT crypto flaws, and the actual footprint matches that offensive goal, but it gives an AI agent explicit admin-takeover procedures and forwards live tokens into third-party tools. Not confirmed malware, but it is a dangerous exploit skill with significant credential-handling and supply-chain risk.

Confidence: 94%Severity: 90%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:47 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-jwt-crypto%2F@eff81bd862f4f117bab9f8f46186bb59e1cd759933405ade2c84d4822f646574