performing-penetration-testing

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: purpose and capabilities are internally aligned for a pentest orchestrator, and the visible install/data-flow footprint is mostly local and proportionate. However, it is still a high-risk AI-agent offensive security skill with broad orchestration power, transitive trust in 25 downstream skills, and an authorization-flow inconsistency for some routes.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:53 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fperforming-penetration-testing%2F@ba273fda3dc3f10acc9886f7290c992f1c3456bcbb9be64c2390e45928fbbd12