testing-websocket-api-security

SUSPICIOUS. The skill’s behavior is coherent with its stated purpose, but that purpose is offensive security: it teaches an AI agent to conduct WebSocket exploitation, including a working data-exfiltration PoC and DoS actions. Installer trust is relatively normal, but the operational capability is high risk and unsuitable outside tightly authorized security work.

No direct evidence of malware (backdoor, data theft, command execution, persistence, or stealthy exfiltration) exists in this module. However, it is an active WebSocket/HTTP probing tool that intentionally sends attack-like payloads, performs authorization/channel enumeration checks, and can generate high-rate traffic (flood testing). As a dependency, it presents a moderate security risk primarily due to misuse potential and potential operational harm, not because it appears to be secretly malicious or obfuscated.