hunt-sharepoint
Warn
Audited by Socket on Sep 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
High-risk offensive security skill. The static data-exfiltration findings are mostly documentation artifacts, but the skill’s actual purpose is to enable an AI agent to perform exploit reconnaissance, brute-force validation, smuggling tests, and pre-RCE chain confirmation against live SharePoint targets. No suspicious installer or third-party credential-forwarding path is present, but the capability set is inherently dangerous and disproportionate for normal developer workflow use.
Confidence: 93%Severity: 90%
Audit Metadata