cloud-docker-api-abuse

Fail

Audited by Socket on Oct 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill’s stated purpose is offensive host compromise through exposed Docker control planes, with instructions to read sensitive files, harvest secrets, and establish persistent access. There is no install-chain concern, but the capability itself is fundamentally incompatible with benign agent use and creates severe real-world abuse risk.

Confidence: 97%Severity: 98%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:30 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fcloud-docker-api-abuse%2F@b6d014b3f3f50474f0baeecf3d258ab39f959e5710f200457717940e75a7c685