hunt-ntlm-info

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s behavior matches its stated purpose, but that purpose is offensive recon for attack chaining against external services. There is no installer or credential-stealing flow, yet the guidance enables active security probing and disables TLS verification, making it a high-risk exploit-oriented skill rather than a benign admin/integration helper.

Confidence: 91%Severity: 79%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-ntlm-info%2F@33f58f4d4b56dccf186816e36aee7efa0c559357222a85b1609549330475c202