cloud-imds-ssrf

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its stated purpose matches its behavior, but that behavior is to steal cloud instance credentials via SSRF and use them against cloud APIs. There is little supply-chain concern, yet the exploit and credential-theft capability itself makes the skill dangerous.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:30 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fcloud-imds-ssrf%2F@f2ad43a3a928c47b40815ad1aa5c851fea95681807760e0f37a54772a55b2bad