performing-privilege-escalation-on-linux

Warn

Audited by Socket on Sep 15, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent with its stated red-team purpose, but that purpose is itself high risk because it equips an AI agent to perform active privilege escalation and obtain root access. No direct credential harvesting or exfiltration is evident, yet the offensive command/exploit guidance and likely use of GitHub-distributed tooling make the skill dangerous in practice.

Confidence: 92%Severity: 89%
SecurityMEDIUM
references/workflows.md

The fragment is offensive-security documentation containing explicit Linux privilege-escalation instructions. It presents substantial misuse and system-compromise risk if executed on unauthorized systems, especially the remote-script execution, SUID/sudo shell escapes, kernel exploit references, Docker escape, NFS abuse, and cron PATH hijacking examples. It does not itself contain executable malware or evidence of covert malicious behavior, persistence, or data theft.

Confidence: 99%Severity: 86%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:03 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-privilege-escalation-on-linux%2F@63c8c577b2f88b8cb0f086d291e370af034c745b3930e38a2064a4cb24b0de35