HTML Injection Testing

Fail

Audited by Socket on Sep 4, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill’s stated purpose is offensive exploitation, and its actual content centers on phishing, credential capture, defacement, and exfiltration to attacker-controlled endpoints. There are no unusual install-trust issues, but the operational behavior and data flows are clearly designed for abuse rather than legitimate developer assistance.

Confidence: 98%Severity: 97%
Audit Metadata
Analyzed At
Sep 4, 2026, 03:06 PM
Package URL
pkg:socket/skills-sh/new-career-begin%2Fqueryweaver%2Fhtml-injection-testing%2F@fd8248e61bfaf7d301cdf171e91d80483644b2bd
Security Audit — socket — HTML Injection Testing