HTML Injection Testing
Fail
Audited by Socket on Sep 4, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
MALICIOUS. The skill’s stated purpose is offensive exploitation, and its actual content centers on phishing, credential capture, defacement, and exfiltration to attacker-controlled endpoints. There are no unusual install-trust issues, but the operational behavior and data flows are clearly designed for abuse rather than legitimate developer assistance.
Confidence: 98%Severity: 97%
Audit Metadata