tools-mcp-bridges

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally consistent with its stated purpose, but that purpose is inherently high risk: it equips an AI agent with pentesting and exploitation capabilities, including an arbitrary-command terminal bridge. Official Kali apt packages reduce install-trust concern, but the third-party Docker/community MCP options and the offensive tool exposure keep overall security risk high. This looks vulnerable/high-risk rather than malicious.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:31 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Ftools-mcp-bridges%2F@f488b977b588d3573f71dfaecf9226558da0191bdd2c0c84dc5ee7b0fb5688ec