web-open-graph-ssrf

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent as an SSRF exploitation technique, but it equips an AI agent with offensive security procedures, internal-network probing tactics, file:// abuse, and OOB exfiltration via Interactsh/Collaborator. There is little supply-chain concern, but the operational security risk is high because the capability itself is dangerous and readily actionable.

Confidence: 96%Severity: 93%
Audit Metadata
Analyzed At
Sep 20, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fweb-open-graph-ssrf%2F@92fe5204358930386f4e11c9600165c471a9f1ca6e946f74d946d0fa3a406e36
Security Audit — socket — web-open-graph-ssrf