web-lfi-path-traversal
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the scanner finding itself is benign documentation context, but the skill is an offensive exploit guide that teaches LFI/path traversal exploitation up to RCE, including a remote attacker-controlled archive path via pearcmd. No direct malware or credential theft is embedded in the skill file, yet its operational purpose is high-risk offensive security enablement for an AI agent.
Confidence: 92%Severity: 82%
Audit Metadata