performing-purple-team-atomic-testing

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Legitimate purple-team skill with strong purpose-capability alignment, but it is inherently high risk because it equips the agent to run offensive security tests that modify systems and can automate recurring execution. Main trust issue is the official-but-unpinned Red Canary raw GitHub installer executed via IEX; data flows otherwise stay consistent with the stated detection-validation workflow and do not show credential harvesting or covert exfiltration.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:50 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-purple-team-atomic-testing%2F@bac73d70cba0dbe01f8612272f195521a0bb4d196cf0381a68f6039df6483990