conducting-domain-persistence-with-dcsync

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its footprint is fully aligned with its stated red-team purpose, so it is not deceptive, but that purpose is to perform credential dumping, ticket forgery, and persistence in Active Directory. Because it equips an AI agent with offensive security actions against live identity systems, the overall security risk is high even though evidence of hidden malware or exfiltration to attacker-owned servers is not present.

Confidence: 94%Severity: 92%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:35 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fconducting-domain-persistence-with-dcsync%2F@20a25d8128852a7593423db2c80ee97fe32aa97b8f5facb690ae85a5e5bc6910