ctf-pwn

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK but not confirmed malware. The skill is internally consistent as a CTF pwn playbook and uses mostly normal tooling, but it equips an AI agent with offensive exploitation workflows against remote services, which is disproportionate for general agent safety and creates clear misuse risk.

Confidence: 92%Severity: 78%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:30 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fctf-pwn%2F@abef5f36afb7883f5baddce7e13287c81c774f0992c58335411cc539ec087c8f