executing-active-directory-attack-simulation
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
High-risk offensive security skill. Its capabilities align with its stated AD attack-simulation purpose, so this is not disguised malware, but it equips an AI agent to perform credential theft, lateral movement, and full domain-compromise actions. No obvious third-party exfiltration or deceptive install path is shown, yet the exploit and credential-handling scope makes the skill dangerous by design.
Confidence: 94%Severity: 91%
Audit Metadata