redteam-mindset

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The install commands themselves are mostly ordinary, but the skill’s core function is to give an AI agent offensive red-team capability: broad target probing, exploit-class testing, auth-bypass attempts, CAPTCHA bypass via third parties, and OOB validation. That footprint is coherent with the stated purpose, so this is not confirmed malware, but it is a high-risk offensive-security skill with notable trust concerns around third-party data flows and APKPure sourcing.

Confidence: 91%Severity: 79%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:51 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fredteam-mindset%2F@f64e9a723a61c41791b31495c6f691d3fe25d38a614b6c9c960316b141c413d9