ai-testing-safety

Warn

Audited by Socket on May 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the main red-teaming guidance is broadly consistent with the stated purpose, but the skill grants high-risk offensive testing capability to an AI agent and unnecessarily expands trust by instructing installation of another skill from a third-party GitHub repo through the skills CLI. The strongest concern is transitive skill installation from an unverified publisher, not direct malware or credential theft.

Confidence: 90%Severity: 83%
Audit Metadata
Analyzed At
May 13, 2026, 06:48 PM
Package URL
pkg:socket/skills-sh/lebsral%2Fdspy-programming-not-prompting-lms-skills%2Fai-testing-safety%2F@9a71a591c53f3baad79067e48a4272322d390e55
Security Audit — socket — ai-testing-safety