pentest-client-advanced

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with its stated purpose, but that purpose is to give an AI agent offensive penetration-testing capability against client-side web targets. Tooling provenance appears mostly legitimate, yet the overall skill materially increases the agent’s ability to execute real attacks and should be treated as high security risk rather than malware.

Confidence: 90%Severity: 83%
Audit Metadata
Analyzed At
Sep 28, 2026, 02:41 PM
Package URL
pkg:socket/skills-sh/jd-opensource%2Fjoysafeter%2Fpentest-client-advanced%2F@a8828ce3ee4cd671f728841868a063079f145811bd241629487251e0140081db