bug-bounty
Warn
Audited by Socket on Sep 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is internally consistent as a bug-bounty/offensive-security orchestrator, but that stated purpose itself grants an AI agent high-risk offensive capabilities, including exploitation, exfiltration techniques, CI/CD abuse patterns, and AI prompt/system-prompt attacks. Install paths are mostly ordinary documentation, not malware, but the bundled installer is unverifiable and the skill chains into other skills. High security risk, low evidence of confirmed malware.
Confidence: 90%Severity: 91%
Audit Metadata