hunt-ssrf

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as an SSRF hunting/exploitation guide, but its stated purpose is explicitly offensive and equips an AI agent to probe targets, confirm blind SSRF through third-party OOB services, access internal/cloud metadata endpoints, and chain to RCE. No malicious installer or hidden exfil path is present, yet the autonomous offensive security capability and exfiltration-oriented workflows make it high risk for agent use.

Confidence: 91%Severity: 83%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:49 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-ssrf%2F@b7722f42e036554c1669b949193414b3405c7003