web-request-smuggling

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

HIGH risk offensive security skill. Its stated purpose matches its capabilities, but those capabilities are to exploit request smuggling and potentially intercept other users' data. No confirmed malware or hidden exfiltration endpoint is present, but the skill materially enables credential theft and unauthorized impact against external systems; referenced third-party tooling also has moderate supply-chain trust concerns.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Sep 20, 2026, 11:04 PM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fweb-request-smuggling%2F@7a5ba9f9fb2e75409f7b9243f802002b3099d8e20684a5369e2e6a1dc88c9705
Security Audit — socket — web-request-smuggling