pentest-checklist

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is purpose-aligned and not overtly malicious: it is a pentest planning/checklist guide with standard security-tool examples and official documentation links. However, because it equips an AI agent for offensive-security workflows and includes commands that could scan targets or capture traffic, it should be classified as SUSPICIOUS/high-vulnerability rather than benign. No credential harvesting, hidden routing, or malicious installer behavior is evident.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Apr 1, 2026, 05:35 AM
Package URL
pkg:socket/skills-sh/KevinZai%2Fcc-commander%2Fpentest-checklist%2F@50b580283c0496f3dbd2c6e49c643d6ec6bfa65a
Security Audit — socket — pentest-checklist