skills/noorqureshi/security-skills/web-oauth/Socket

web-oauth

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent, but its stated purpose is to help an AI agent perform OAuth/OIDC/SSO exploitation and account-takeover testing. There is little supply-chain concern, but the offensive auth-abuse capability makes it high security risk for deployment to general-purpose agents.

Confidence: 90%Severity: 86%

Audit Metadata

Analyzed At

Oct 15, 2026, 10:31 AM

Package URL

pkg:socket/skills-sh/noorqureshi%2Fsecurity-skills%2Fweb-oauth%2F@ab09872828619db3164a869a62ca34591b2851daef966b5cf122113e88813523