vmware-vcenter-attack

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as an offensive VMware attack guide, but that stated purpose itself gives the agent high-risk exploitation capability against real targets. There is no strong evidence of hidden credential theft from the operator or covert exfiltration to attacker infrastructure, so it is not confirmed malware; however, it is a high-risk AI-agent exploit skill that enables reconnaissance, credential use, and remote code execution against VMware management planes.

Confidence: 93%Severity: 93%
Audit Metadata
Analyzed At
Sep 29, 2026, 06:52 AM
Package URL
pkg:socket/skills-sh/murrtada%2Fbug-bounty-agent-skills%2Fvmware-vcenter-attack%2F@ea037f520ee4864588e9a43680eadedfba3a7046640fd0174cb74b6ffa16da30