performing-purple-team-exercise

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally consistent as a purple-team exercise guide, and the Red Canary installer appears to be official same-org documentation-consistent tooling. However, the skill gives an AI agent high-risk offensive security instructions capable of credential access, lateral movement, exfiltration simulation, and destructive actions; combined with remote-script installation, this makes the skill dangerous even without clear malicious intent or credential harvesting.

Confidence: 91%Severity: 81%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:50 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-purple-team-exercise%2F@96704674972b8bc1a41d265195d816bd6d425fe9505cb509a8c160f1715c905d