hunt-forgot-password

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with its stated purpose, but that purpose is to equip an AI agent to perform offensive authentication testing and account-recovery abuse patterns on live targets. There is little supply-chain or credential-routing concern in the skill text itself, but the autonomous exploit behavior and real-world account impact make the overall security risk high.

Confidence: 94%Severity: 88%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:49 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-forgot-password%2F@91e5340fad1c7bd10e789dcbbf0a51381ba8c957f6d47717340f0cdcf3018d19