ctf-malware

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent for malware/CTF work, and its installs/data flows mostly match that purpose, but it gives an AI agent substantial offensive security capability and includes dynamic malware execution and traffic interception guidance. Supply-chain risk is moderate from unpinned/manual tools; malware intent is not confirmed because there is no hidden execution, credential theft path, or third-party exfiltration endpoint.

Confidence: 91%Severity: 74%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:50 AM
Package URL
pkg:socket/skills-sh/ljagiello%2Fctf-skills%2Fctf-malware%2F@4b688c71895a08100715d21f74a7c1e9b890c830e15711983c1b48357c7d09f9