skills/murrtada/bug-bounty-agent-skills/m365-entra-attack/Socket

m365-entra-attack

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

High-risk offensive security skill. Its stated purpose matches its capabilities, but those capabilities are credential attack and bypass workflows for M365/Entra, and the provided code weakens transport security while handling real usernames/passwords. Not confirmed malware, but dangerous and inappropriate for a general AI agent deployment.

Confidence: 95%Severity: 92%

Audit Metadata

Analyzed At

Sep 29, 2026, 06:52 AM

Package URL

pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fm365-entra-attack%2F@c9e4a7d69a68867e19ada9cd6e16cf0a8e10bdae2d32d79844fcbf48946d09ef