ios-redteam-pipeline

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is an offensive iOS red-team pipeline. Its capabilities are proportionate to offensive mobile testing, not to general development, and it equips an AI agent to perform runtime instrumentation, pinning bypass, keychain extraction, and MITM setup. Install sources are mostly legitimate and same-purpose, so this is not confirmed malware, but the overall security risk is high because the skill operationalizes exploit/security-testing actions through the agent.

Confidence: 91%Severity: 79%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:54 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fios-redteam-pipeline%2F@b6e8cd09c7ab98f1db3a2b24feb1fbe22fb48523bbd020a28328b3ed6f9f714d