skills/noorqureshi/sploitagent/web-oauth/Socket

web-oauth

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent, but its stated purpose is to help an AI agent perform OAuth/OIDC/SSO exploitation and account-takeover testing. There is little supply-chain concern, but the offensive auth-abuse capability makes it high security risk for deployment to general-purpose agents.

Confidence: 90%Severity: 86%

Audit Metadata

Analyzed At

Sep 20, 2026, 11:03 PM

Package URL

pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fweb-oauth%2F@ab09872828619db3164a869a62ca34591b2851daef966b5cf122113e88813523