pentest-commands

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a pentest command reference, but its actual footprint is inherently high-risk because it equips an AI agent to perform offensive security actions, generate payloads, brute-force services, crack credentials, and capture sensitive traffic. There are no obvious third-party credential-harvesting endpoints or suspicious installers in the provided content, so this is not confirmed malware; it is a high-risk offensive capability skill.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Oct 11, 2026, 11:57 AM
Package URL
pkg:socket/skills-sh/ivanvza%2Fdspy-skills%2Fpentest-commands%2F@839103b7f7d5de93ce1a4c2057325cfb2e6f6569e9760adacc38faabde683c42