vmware-vcenter-attack

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive exploitation of VMware infrastructure, and its capabilities are fully aligned with that purpose but not appropriate for a normal developer-assistance skill. No confirmed malware or hidden exfiltration endpoint is shown, yet the skill materially enables an AI agent to perform reconnaissance, credential attacks, and pre-auth RCE against internet-facing systems.

Confidence: 94%Severity: 86%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:48 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fvmware-vcenter-attack%2F@1f6db1c73548b8960f53476f873ad1ddb605b14a