api-fuzzing-bug-bounty

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent for bug bounty use, but its actual function is to arm an AI agent with offensive security techniques and live exploitation workflows. The main risk is agent-enabled scanning/exploitation and callback-based data leakage, not covert malware behavior.

Confidence: 91%Severity: 90%
Audit Metadata
Analyzed At
Aug 1, 2026, 01:35 AM
Package URL
pkg:socket/skills-sh/kursku%2Fskills%2Fapi-fuzzing-bug-bounty%2F@49541362104ea7c69a2ba9ec5009daf4188a0b38cc23cbc3b3ba4e471a948378