skills/noorqureshi/sploitagent/cloud-gcp/Socket

cloud-gcp

Fail

Audited by Socket on Sep 20, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

This skill is overtly malicious in purpose: it equips an AI agent to steal GCP credentials, escalate privileges, and access protected data. Official Google tooling/endpoints reduce supply-chain concern, but they do not mitigate the core issue that the skill is an offensive cloud attack playbook.

Confidence: 98%Severity: 99%

Audit Metadata

Analyzed At

Sep 20, 2026, 11:02 PM

Package URL

pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fcloud-gcp%2F@519c73b6ef200c854294c71e093093f49bdf2972350eb612e7e5128ffe9c0f9f