pentest-recon-attack-surface

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent for white-box pentest reconnaissance, and tool provenance is mostly consistent with official sources, so it is not deceptive malware. However, it equips an AI agent with explicit offensive security scanning and vulnerability-discovery capabilities against live targets, which creates high operational security risk even when framed as authorized testing.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Sep 28, 2026, 02:41 PM
Package URL
pkg:socket/skills-sh/jd-opensource%2Fjoysafeter%2Fpentest-recon-attack-surface%2F@10a0bdaff82147b48353723d1e29fa6e3e461bf2062a0419f5656287247eeb8e