hunt-sharepoint

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. The static data-exfiltration findings are mostly documentation artifacts, but the skill’s actual purpose is to enable an AI agent to perform exploit reconnaissance, brute-force validation, smuggling tests, and pre-RCE chain confirmation against live SharePoint targets. No suspicious installer or third-party credential-forwarding path is present, but the capability set is inherently dangerous and disproportionate for normal developer workflow use.

Confidence: 93%Severity: 90%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:50 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-sharepoint%2F@dd73d94598c73692cc0bb39e372a08f1823eeed8a75f96a6887b4b6e30801475