pentest-supply-chain

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent and uses proportionate access for its stated purpose, but that purpose is to give an AI agent offensive supply-chain pentesting capability. No strong malware or credential-theft indicators are present, yet the agent enablement for security testing materially raises operational risk.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Sep 28, 2026, 02:41 PM
Package URL
pkg:socket/skills-sh/jd-opensource%2Fjoysafeter%2Fpentest-supply-chain%2F@5329671c2ed60fd01458e4be45319a95628fd374fccb24665fe70bda0787b5de