vulnerability-verification

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally aligned as a penetration-testing verification workflow, but it gives an AI agent high-risk offensive capabilities, includes stealth/WAF-evasion guidance, routes proof traffic to attacker-controlled endpoints, and trusts unseen local scripts plus a transitive sub-skill. Not confirmed malware, but dangerous and inappropriate outside a tightly controlled authorized security environment.

Confidence: 92%Severity: 90%
Audit Metadata
Analyzed At
Aug 6, 2026, 06:28 AM
Package URL
pkg:socket/skills-sh/narlyseorg%2Fsuperhackers%2Fvulnerability-verification%2F@9d466c24d1f62d32ba5176e24ae8df1f6fa753126f6627fc5693e7034862ac95
Security Audit — socket — vulnerability-verification