performing-gcp-penetration-testing-with-gcpbucketbrute

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally consistent with its stated pentesting purpose, but that purpose is to give an AI agent offensive cloud-security capability. The main risks are use of a GitHub-sourced third-party tool and possible credential forwarding into that tool; data flows otherwise align with Google APIs and the declared task. Not malware, but high security risk as an AI-agent pentesting skill.

Confidence: 89%Severity: 81%
Audit Metadata
Analyzed At
Sep 20, 2026, 01:44 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-gcp-penetration-testing-with-gcpbucketbrute%2F@76ec4d8e0bdea9ead39b38282c6f88d688f5a61b1cdd9f73fe2d5f14f4d08532