tools-nmap

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent for a penetration-testing skill, and data flows stay direct to target hosts with no credential harvesting or suspicious installer behavior. The main risk is that this skill equips an AI agent to perform offensive network scanning, so it is not malware but remains high security risk due to real-world active reconnaissance capability.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:31 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Ftools-nmap%2F@6d614e3af8a4ac518a335349d41062330445fbcedf4eb88e1d3b5077f7d05f9f