hunt-deserialization

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is a high-risk offensive security capability: its stated purpose is to exploit deserialization and JNDI vulnerabilities, install exploit tooling, and trigger/verify remote code execution on targets. The footprint is internally consistent with that offensive purpose, but that purpose itself is inappropriate for a general AI agent skill because it enables exploitation of real systems and routes verification traffic to external collaborator endpoints. Distribution sources are mostly real upstream projects, so this is not confirmed credential-stealing malware, but it is still a dangerous exploitation playbook.

Confidence: 95%Severity: 93%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-deserialization%2F@195540e70f6dc9a38e676c0b5483ddf5f3949c6a094ff01d77318996ac14cc2e