cloud-security

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose broadly matches cloud security work, but its actual footprint is heavy: it instructs the agent to install and use numerous external audit and offensive-security CLIs with live cloud credentials. Most install paths appear plausibly official, which argues against confirmed malware, but the unpinned multi-tool chain and weak provenance for some packages make the trust and credential-forwarding scope disproportionate for a thin router skill.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:17 PM
Package URL
pkg:socket/skills-sh/hardw00t%2Fai-security-arsenal%2Fcloud-security%2F@03a268f62611d2f836ab86a81ef336048b3e23348af64d6950cc35a6ff9f82c5