skills/noorqureshi/security-skills/web-file-upload/Socket

web-file-upload

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

HIGH risk offensive exploit skill. It is internally consistent with its stated purpose, but that purpose is to equip the agent to attack file-upload functionality with practical RCE/XSS/SSRF/XXE techniques. No supply-chain, credential-harvesting, or obfuscation signals are present, but the exploit enablement alone makes this unsafe.

Confidence: 93%Severity: 88%

Audit Metadata

Analyzed At

Oct 15, 2026, 10:31 AM

Package URL

pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fweb-file-upload%2F@56bafa2cb26939620943637baf2dd2df5deb4f5bb135f84566c916653f9759f2