quickscan

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as a security-scanning workflow, but it gives an AI agent offensive recon/vulnerability assessment capability and executes shell commands with direct target interpolation. Install trust for `uv` is acceptable, yet the undisclosed local scripts/sub-agents and autonomous external scanning keep overall risk high.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
May 10, 2026, 07:59 AM
Package URL
pkg:socket/skills-sh/H-mmer%2Fpentest-agents%2Fquickscan%2F@c11ae84321bbc32a857b7969055456256822116a
Security Audit — socket — quickscan