cloud-iam-deep

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is not malware and the flagged secret/file-access patterns are largely documentation artifacts, but it is a high-risk offensive security skill. Its capabilities are coherent with its stated red-team purpose, yet that purpose itself gives an AI agent concrete cloud exploitation, credential abuse, and privilege-escalation workflows, including insecure TLS-bypass examples and metadata-token extraction.

Confidence: 94%Severity: 83%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fcloud-iam-deep%2F@f8ac4d3085f2d86e5fab6d2fe007b6ea6187c18ea4e10c4af5cd0f5558546d27