pentest-exploit-validation

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: internally coherent as an offensive pentest skill, but it gives an AI agent high-risk exploitation capabilities, including bypass automation, data exfiltration, account takeover validation, and SSRF metadata access. The main concern is not deceptive purpose mismatch; it is that the skill operationalizes real attack techniques with meaningful real-world impact and forwards sensitive credentials/tokens into several external tools.

Confidence: 93%Severity: 90%
Audit Metadata
Analyzed At
Sep 28, 2026, 02:42 PM
Package URL
pkg:socket/skills-sh/jd-opensource%2Fjoysafeter%2Fpentest-exploit-validation%2F@52d8011e965a6647740db51d2e247e38ee76e133f9d8c829ae735fbced847d96