performing-bandwidth-throttling-attack-simulation

Warn

Audited by Socket on Sep 15, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive network-attack capability. It uses legitimate tools and shows no credential theft or covert exfiltration, yet it enables disruptive real-world actions (traffic shaping, MITM throttling, connection exhaustion) and therefore carries high security risk despite low evidence of malware.

Confidence: 92%Severity: 84%
SecurityMEDIUM
scripts/agent.py

The code is a plainly written network testing tool with explicit traffic-throttling and UDP-flood functionality. Although labeled for authorized testing, it can disrupt a local interface and overwhelm a remote target, so it should only be used in an isolated, explicitly authorized test environment. No evidence of data theft, persistence, command injection through a shell, or obfuscated malware is present. The supplied fragment also appears syntactically incomplete at the final print(report call.

Confidence: 98%Severity: 86%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:29 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-bandwidth-throttling-attack-simulation%2F@2f683f4f81faf38b49ebd14b7e2588201426a6f60ac600ccfa9e286aba06289c