performing-penetration-testing
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: purpose and capabilities are internally aligned for a pentest orchestrator, and the visible install/data-flow footprint is mostly local and proportionate. However, it is still a high-risk AI-agent offensive security skill with broad orchestration power, transitive trust in 25 downstream skills, and an authorization-flow inconsistency for some routes.
Confidence: 90%Severity: 78%
Audit Metadata