performing-iot-security-assessment

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally aligned with its stated purpose, but that purpose is to equip an AI agent with offensive IoT penetration-testing capabilities. The main risk is not hidden exfiltration; it is the explicit enablement of exploitation, credential extraction, MITM, fuzzing, and lateral movement, plus moderate supply-chain risk from unpinned third-party toolchain components.

Confidence: 92%Severity: 88%
Audit Metadata
Analyzed At
Apr 21, 2026, 12:24 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-iot-security-assessment%2F@d3f99b107944102381b809d9dc1a27c9cdcd6b3a
Security Audit — socket — performing-iot-security-assessment