performing-red-team-with-covenant

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally coherent and uses mostly legitimate same-project install sources, but its purpose is to give an AI agent offensive C2 capability: payload generation, grunt deployment, remote tasking, and lateral movement support. That makes it high risk even without signs of credential theft or deceptive routing.

Confidence: 91%Severity: 88%
Audit Metadata
Analyzed At
Apr 7, 2026, 01:03 PM
Package URL
pkg:socket/skills-sh/mukul975%2FAnthropic-Cybersecurity-Skills%2Fperforming-red-team-with-covenant%2F@6a49d8eb12cdc85a6430c363c83883c2a715d097