bb-methodology

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent with its content, but that purpose is to give an AI agent offensive security methodology and tool-routing for live target exploitation. It is not confirmed malware and does not show credential theft from the user or hidden exfiltration, but it materially increases offensive capability and autonomy, so overall risk is high.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:51 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fbb-methodology%2F@06eed0b72e17b66756273d289bcf7f1ea1bba8a34f3fc4ea56ee90829dec08e0