hunt-session

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent: this is a session-vulnerability hunting skill, and its commands directly support that goal. The main concern is not covert malware behavior but that it equips an AI agent to perform offensive security testing, handle live session credentials, and optionally confirm theft chains via third-party OOB infrastructure. No malicious installer, hidden exfiltration path, or deceptive credential harvesting is evident, but the skill is high-risk because of its exploit-oriented scope.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:51 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-session%2F@c7d9c4f6df3616799b73a3bd901c70d450b03adaa8963888b3c984954602b1de