Security Pentesting Bundle

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The visible bundle is a local index, not an installer or exfiltration script, so there is little evidence of confirmed malware in the excerpt itself. However, its stated purpose is to equip an AI agent with offensive security and exploitation capabilities, and it delegates behavior to many unseen sub-skills, making the overall skill high risk and unsuitable to treat as benign without reviewing the referenced sub-skills.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Sep 14, 2026, 01:27 PM
Package URL
pkg:socket/skills-sh/mayurrathi%2Fawesome-agent-skills%2Fsecurity-pentesting-bundle%2F@55cddd3a93af921f42cd14a65458c55189bfca0e
Security Audit — socket — Security Pentesting Bundle