reverse-eng-js

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent and does not show malware-like install or exfiltration behavior, but it is an offensive reverse-engineering technique that captures session data and reproduces client-side signing/encryption logic for bypass and fuzzing. High operational risk comes from the exploit-focused purpose, not from deceptive supply-chain or credential-harvesting patterns.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:31 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Freverse-eng-js%2F@1ce4af0c9ef0ab90a409ff95c4b2bd087fc7852cd50634df3b2c45e6cfe9fea6