skills/h-mmer/pentest-agents/learn/Socket

learn

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the skill has a real command-injection issue from unquoted shell interpolation and an unclear cross-scope sync path through opaque local scripts.

Confidence: 84%Severity: 76%

Audit Metadata

Analyzed At

May 10, 2026, 07:59 AM

Package URL

pkg:socket/skills-sh/H-mmer%2Fpentest-agents%2Flearn%2F@f7c5d97caba8aeaf227d47f65f45fe6bdef2e4f7