testing-for-business-logic-vulnerabilities

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent and uses official/normal tools, but its actual purpose is to equip an AI agent with offensive penetration-testing techniques that can manipulate transactions, exploit race conditions, and attempt privilege escalation. There is no clear credential-harvesting or malware behavior, yet the capability itself is high risk for agent deployment and should be treated as a dangerous security-testing skill rather than benign workflow guidance.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:59 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Ftesting-for-business-logic-vulnerabilities%2F@e3937035cc57b289aa2b159c1a1356448b0b1c7d7bb6ab03731a06e7afe98b58