hunt-subdomain

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This is an offensive subdomain-takeover skill with unusually explicit account-takeover, credential-interception, phishing, and evasion guidance. Although framed as vulnerability hunting and reporting, its instructions enable harmful actions against real targets; classify as high risk, not confirmed malware.

Confidence: 97%Severity: 93%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:48 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-subdomain%2F@00dcffc08c7f73f96e79ea25d7fc74715a82fd1b