skills/mukul975/anthropic-cybersecurity-skills/performing-threat-hunting-with-yara-rules/Socket

performing-threat-hunting-with-yara-rules

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill is internally coherent for YARA-based threat hunting, and its data flows stay local rather than exfiltrating data. However, it is a high-risk security-tool skill for an AI agent and includes moderate supply-chain exposure through unpinned installs, GitHub clone-and-execute of yarGen, and trust in community rule repositories.

Confidence: 90%Severity: 78%

Audit Metadata

Analyzed At

Sep 20, 2026, 01:46 PM

Package URL

pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-threat-hunting-with-yara-rules%2F@743aa683cda8d0d7380a7c674ab6eaaa98e84e6596980ca02aa602bf4a2df7d5