hunt-cloud-misconfig

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent as an offensive cloud-misconfiguration hunting playbook, but its actual footprint is high-risk for an AI agent: it teaches credential extraction, unauthorized cloud enumeration, write validation on third-party resources, covert exfiltration through AWS RUM, and chaining into other attack skills. Install provenance is mostly official and there is no strong malware signal, but the autonomy and exploit guidance make the skill dangerous and disproportionate for routine agent use.

Confidence: 94%Severity: 86%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-cloud-misconfig%2F@6cca63a2843cdab894ec3a24388bc1c0e25962f3c415ec9f530ee9e56de381d3