hunt-ldap
Warn
Audited by Socket on Nov 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally consistent, but its stated purpose is offensive exploitation of LDAP/XPath injection, including auth bypass, enumeration, and blind exfiltration. There is no clear malware or deceptive installer behavior, yet it meaningfully equips an AI agent to attack real systems and extract sensitive directory data.
Confidence: 92%Severity: 82%
Audit Metadata