mitm-find-sqli

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for SQL injection discovery and uses an official local tool (`mitmdump`) without suspicious installers or third-party credential routing, so it is not malware-like. However, its actual footprint is an offensive security skill for AI agents: it goes beyond passive log review into active payload testing, WAF bypass, and database extraction guidance against live targets, which makes it high risk despite benign supply-chain characteristics.

Confidence: 93%Severity: 76%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:33 PM
Package URL
pkg:socket/skills-sh/instavm%2Fsecurity-skills%2Fmitm-find-sqli%2F@06f488e0c090dfb80c3a86bd3b4db078e8a5a7d57c94e13471c338b66b3c75c6