performing-purple-team-exercise
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill is internally consistent as a purple-team exercise guide, and the Red Canary installer appears to be official same-org documentation-consistent tooling. However, the skill gives an AI agent high-risk offensive security instructions capable of credential access, lateral movement, exfiltration simulation, and destructive actions; combined with remote-script installation, this makes the skill dangerous even without clear malicious intent or credential harvesting.
Confidence: 91%Severity: 81%
Audit Metadata