performing-web-application-penetration-test

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as a pentesting guide, but its purpose is to equip an AI agent with offensive web exploitation techniques and tooling. There is no clear credential theft or hidden exfiltration, so it is not confirmed malware, but it is a high-risk security/exploit skill that can drive impactful actions against real systems.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Sep 14, 2026, 08:57 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-web-application-penetration-test%2F@ab7dc6c267d3dedc99e29035dbfda55c70026b4d72451e21658c39d74e0cfb57