web-jdbc-attacks

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose is offensive exploitation of JDBC drivers to achieve RCE or file read in third-party applications. There is no hidden installer, credential theft flow, or obfuscation, but enabling an AI agent to perform exploit development/abuse against targets is inherently high risk and disproportionate to normal developer workflow.

Confidence: 95%Severity: 86%
Audit Metadata
Analyzed At
Oct 15, 2026, 10:31 AM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fweb-jdbc-attacks%2F@0e586fef512a3f28482d800f4150cc32d0ecc6c504dbd22256a0bd11ea5c5fb0