web-idor

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent and not a credential stealer, but its core purpose is to equip an AI agent for active web exploitation workflows. Supply-chain and exfiltration concerns are low; the main risk is offensive security enablement against live targets.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:31 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fweb-idor%2F@4b707ad7ccb4437df5007c426b4ed0e53628167a8f79d95d69802b3e0173403f