ai-insecure-output-handling

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent and does not show credential theft, malware delivery, or hidden data exfiltration, but it is an offensive security skill that teaches an AI agent how to exploit insecure LLM output handling and downstream injection sinks. Risk is driven by misuse potential rather than malicious install or data-flow behavior.

Confidence: 94%Severity: 72%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:30 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fai-insecure-output-handling%2F@f67ee1190495a763ed3f35c7fc2d62893d6bef83673baef6e7616cb73df599f7