enumerating-cloud-with-cloudfox
Warn
Audited by Socket on Aug 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is internally consistent with its stated purpose and uses verifiable same-project install sources, so it is not malware. However, its purpose is explicitly offensive cloud reconnaissance for lateral-movement and privilege-escalation planning, and it requires powerful cloud credentials while enumerating secrets and attack paths; this makes it a high-risk security tool for AI-agent deployment.
Confidence: 90%Severity: 78%
Audit Metadata