hunt-captcha-bypass

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is an offensive web security testing playbook for bypassing CAPTCHA protections on live endpoints. It has little supply-chain or credential-harvesting behavior, but its core capability belongs to exploit testing and can directly enable brute force, account farming, and password-reset abuse.

Confidence: 93%Severity: 84%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:49 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-captcha-bypass%2F@a5e2d2a4f42ca86e0c6bd9399a6beac2bb9854d91413bf156097942b5206d0fa