bug-bounty

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a bug-bounty/offensive-security orchestrator, but that stated purpose itself grants an AI agent high-risk offensive capabilities, including exploitation, exfiltration techniques, CI/CD abuse patterns, and AI prompt/system-prompt attacks. Install paths are mostly ordinary documentation, not malware, but the bundled installer is unverifiable and the skill chains into other skills. High security risk, low evidence of confirmed malware.

Confidence: 90%Severity: 91%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fbug-bounty%2F@4d5792e0a281f082ddc42aeac1c65e1c3b364d356c3a9bf2c6b42c477a3496a6