mitm-find-ssrf

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent as an SSRF-testing skill and uses official tooling, but its purpose is offensive security for an AI agent: it teaches exploitation workflows, internal/cloud metadata targeting, and OOB confirmation via interception services. Risk is high from agent misuse, not from hidden malware or supply-chain behavior.

Confidence: 95%Severity: 87%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:33 PM
Package URL
pkg:socket/skills-sh/instavm%2Fsecurity-skills%2Fmitm-find-ssrf%2F@639b69f762e3cc2f33e3e6423f4c76cda9381bd31977e8caa0f34e15e6a653ff