ctf-crypto

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally coherent as a CTF crypto playbook, but it gives an AI agent offensive security capabilities: attacking RSA/XOR schemes, scripting oracle interactions, and using external cracking tools/services. There is no clear credential harvesting or deceptive exfiltration path, and no installer is embedded, so malware likelihood is low. Risk is still high because this is a security/exploit skill that can be repurposed against unintended targets, with some added supply-chain uncertainty from referenced third-party tools/services.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:30 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fctf-crypto%2F@b8df765f7c6bedf36fbb2c7df47817b5b3549d022c0db3f0fa70b0784e38be75