enumerating-cloud-with-cloudfox

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally consistent with its stated purpose and uses verifiable same-project install sources, so it is not malware. However, its purpose is explicitly offensive cloud reconnaissance for lateral-movement and privilege-escalation planning, and it requires powerful cloud credentials while enumerating secrets and attack paths; this makes it a high-risk security tool for AI-agent deployment.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Aug 5, 2026, 10:40 AM
Package URL
pkg:socket/skills-sh/mukul975%2FAnthropic-Cybersecurity-Skills%2Fenumerating-cloud-with-cloudfox%2F@e2c59c6c343070ccd0163c0d44afb25f886c579cad6924e5550e11d93285acd1
Security Audit — socket — enumerating-cloud-with-cloudfox