hunt-websocket

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is a coherent offensive WebSocket pentesting playbook, but it gives an AI agent explicit exploit-testing and data-exfiltration procedures against live targets. Official tool installs reduce supply-chain concern, yet the skill remains high risk because it operationalizes credential theft, cross-account data capture, tampering, and smuggling validation. High security risk; not confirmed malware.

Confidence: 92%Severity: 86%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:51 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fhunt-websocket%2F@7ed2d11220a8ccaa1da8f1764e7c78defec87d2f9bdbb2bfb290130aad78d256