building-automated-malware-submission-pipeline

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent for SOC malware-analysis automation and mostly uses official services, so it does not look like credential theft or disguised malware. However, it gives an AI agent high-risk security-tooling capability, forwards multiple credentials, can disable TLS verification, uploads suspicious samples externally, and can autonomously push firewall blocks; these factors make it high security risk even though the purpose is legitimate.

Confidence: 92%Severity: 78%
Audit Metadata
Analyzed At
Sep 17, 2026, 09:55 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fbuilding-automated-malware-submission-pipeline%2F@7e432471e98285a2d4cf36dfe3b1a6bd62bc9413a94a88119299d8aa55329b5f