skills/h-mmer/pentest-agents/submit/Socket

submit

Warn

Audited by Socket on May 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, and the confirmation gate meaningfully limits abuse, but the skill forwards credentials and report contents through opaque MCP tooling with unverifiable data flow. This is not confirmed malicious, yet the hidden submission path and dependency trust gaps create medium risk for credential exposure or unintended routing.

Confidence: 84%Severity: 64%

Audit Metadata

Analyzed At

May 10, 2026, 07:59 AM

Package URL

pkg:socket/skills-sh/H-mmer%2Fpentest-agents%2Fsubmit%2F@bc91d0a4337178f4512909a321e3eb4b3a40bc11