pentest-secrets-exposure

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is offensive security testing with live secret discovery and credential validation. No clear evidence of hidden exfiltration or malware, yet the combination of exploit tooling, broad sensitive-data access, and live credential testing makes it a high-risk AI agent skill.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Sep 28, 2026, 02:41 PM
Package URL
pkg:socket/skills-sh/jd-opensource%2Fjoysafeter%2Fpentest-secrets-exposure%2F@a9cad16387a74b12f5b51e1b645ba987b4e9c7b01881b324248d6c0eebc5679d