performing-purple-team-atomic-testing
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Legitimate purple-team skill with strong purpose-capability alignment, but it is inherently high risk because it equips the agent to run offensive security tests that modify systems and can automate recurring execution. Main trust issue is the official-but-unpinned Red Canary raw GitHub installer executed via IEX; data flows otherwise stay consistent with the stated detection-validation workflow and do not show credential harvesting or covert exfiltration.
Confidence: 91%Severity: 76%
Audit Metadata