engagement-memory

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent as a cross-engagement memory tool, but its stated purpose is to improve recon/weaponize and reporting for offensive security work, which makes it a high-risk security/exploit aid for an AI agent. No external installer, credential theft, or exfiltration path is shown in this excerpt, so this is not confirmed malware; the main risk is enabling offensive operations and spreading tactics across engagements via local persistence and optional global sharing.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:15 AM
Package URL
pkg:socket/skills-sh/hypnguyen1209%2Foffensive-claude%2Fengagement-memory%2F@0eff2cca6663723c70ef5bc259d82ace818f726e2def3c452e920e1b431029ab