api-fuzzing-bug-bounty

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent for bug bounty use, but its actual function is to arm an AI agent with offensive security techniques and live exploitation workflows. The main risk is agent-enabled scanning/exploitation and callback-based data leakage, not covert malware behavior.

Confidence: 91%Severity: 90%
Audit Metadata
Analyzed At
Aug 1, 2026, 01:35 AM
Package URL
pkg:socket/skills-sh/kursku%2Fskills%2Fapi-fuzzing-bug-bounty%2F@49541362104ea7c69a2ba9ec5009daf4188a0b38cc23cbc3b3ba4e471a948378
Security Audit — socket — api-fuzzing-bug-bounty