m365-entra-attack

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its stated purpose is to help an AI agent perform credential attacks, password spraying, user enumeration, and bypass exploration against M365/Entra tenants; that capability is coherent with the description but inherently unsafe for an autonomous agent. No strong evidence of malware or covert exfiltration beyond the explicit attack workflow, but the disabled TLS checks and credential-handling make it dangerous.

Confidence: 96%Severity: 93%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:49 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fm365-entra-attack%2F@bcb3ff061dbcbb5fc5534e9a99911f15ee6c0f13