hunt-cicd

Fail

Audited by Socket on Sep 29, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive CI/CD exploitation, and the actual instructions align with active credential theft, RCE, and exfiltration against third-party targets. The main risk is not deception but that the skill gives an AI agent high-impact offensive security capabilities with explicit secret-harvesting flows; third-party tool installs add moderate supply-chain risk.

Confidence: 94%Severity: 96%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-cicd%2F@c909b0ab3ac5d5d226117bad38e144ccd2e1728e2ab03a1956b5e85bb5128ffc