zero-trust-config-helper
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill text is mostly generic documentation, but its actual footprint is much broader than its stated purpose. The main issue is unrestricted Bash plus write access for an underspecified 'config helper' in a security/pentesting context; there is no clear malicious payload or exfiltration path, but the permissions are disproportionate and high-risk.
Confidence: 88%Severity: 74%
Audit Metadata