skills/noorqureshi/sploitagent/web-idor/Socket

web-idor

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent and not a credential stealer, but its core purpose is to equip an AI agent for active web exploitation workflows. Supply-chain and exfiltration concerns are low; the main risk is offensive security enablement against live targets.

Confidence: 91%Severity: 78%

Audit Metadata

Analyzed At

Sep 20, 2026, 11:03 PM

Package URL

pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fweb-idor%2F@c8cce4c3270b2b6ab91f8d6e9ee761d5f9579d18e77392dbbe83903997618702