performing-ssl-stripping-attack

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally consistent as an offensive security guide, but its actual footprint is a high-risk AI-agent attack capability: root shell commands, MITM setup, traffic interception, DNS spoofing, and credential capture. No clear malicious exfiltration or deceptive installer is present, so this is not confirmed malware; however, it should be classified as high-risk due to explicit offensive-security functionality and real-world network impact.

Confidence: 92%Severity: 91%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:23 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-ssl-stripping-attack%2F@22e6df933a743b9aebd23de981a86fec5dd11a33db058035d8d794ae84c13883