skills/noorqureshi/security-skills/web-cors/Socket

web-cors

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent but its purpose is to help an AI agent perform offensive CORS exploitation and exfiltrate sensitive cross-origin data. Supply-chain risk is low, but the exploit and exfiltration capability makes the overall security risk high.

Confidence: 90%Severity: 82%

Audit Metadata

Analyzed At

Oct 15, 2026, 10:31 AM

Package URL

pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fweb-cors%2F@eb454118ed6981683d57bc6d57d91515f13f9a0954f77f8edbdc02c28449ba1c