ai-testing-safety
Warn
Audited by Socket on May 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the main red-teaming guidance is broadly consistent with the stated purpose, but the skill grants high-risk offensive testing capability to an AI agent and unnecessarily expands trust by instructing installation of another skill from a third-party GitHub repo through the skills CLI. The strongest concern is transitive skill installation from an unverified publisher, not direct malware or credential theft.
Confidence: 90%Severity: 83%
Audit Metadata