zero-trust-config-helper

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill text is mostly generic documentation, but its actual footprint is much broader than its stated purpose. The main issue is unrestricted Bash plus write access for an underspecified 'config helper' in a security/pentesting context; there is no clear malicious payload or exfiltration path, but the permissions are disproportionate and high-risk.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:53 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fzero-trust-config-helper%2F@355fd6dbf0515a933973ac95765ac5ad4388690605e6b8c10ca10c5dff167cd8