hunt-source-leak

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent, but its stated purpose is offensive reconnaissance and secret discovery rather than a narrow developer workflow. It automates credential and source-code leakage hunting against arbitrary targets, with high real-world abuse potential; install trust is only a secondary concern compared with the offensive scope.

Confidence: 94%Severity: 82%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:51 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-source-leak%2F@f0a0950a49009a47ebb403d02b4e0c8a83698e32f5c74a63d784578aa0f41e1c