hunt-ldap

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent, but its stated purpose is offensive exploitation of LDAP/XPath injection, including auth bypass, enumeration, and blind exfiltration. There is no clear malware or deceptive installer behavior, yet it meaningfully equips an AI agent to attack real systems and extract sensitive directory data.

Confidence: 92%Severity: 82%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:48 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-ldap%2F@2e741e452f2d20aece47daca851c01006c82481d836cf38f75ee3ed556c0ed8c