hunt-open-redirect

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is an offensive security playbook that equips an AI agent to probe live targets and build OAuth/SSRF/phishing exploit chains, which is high-risk capability for an agent skill even without overt credential theft. The only direct install concern shown is the unpinned, inconsistently documented openredirex dependency from a personal project; data flows otherwise match the stated purpose.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:48 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-open-redirect%2F@9175498a64a240c85b6429604b153ab2bf79c8646f055a6f92a538db334e5ce3