hunt-ssrf

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s capabilities match its stated purpose, but that purpose is to equip an AI agent with offensive SSRF discovery, internal network targeting, credential exfiltration, and RCE-chain techniques. There is no deceptive installer or hidden payload, yet this is still a high-risk exploit skill unsuitable for broad autonomous use.

Confidence: 95%Severity: 89%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:51 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-ssrf%2F@2a4e9b18dd1b64d41cbc8df6f2ae00296b59ec48b8fa9417e7d523794e47586e