web-request-smuggling
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
HIGH risk offensive security skill. Its stated purpose matches its capabilities, but those capabilities are to exploit request smuggling and potentially intercept other users' data. No confirmed malware or hidden exfiltration endpoint is present, but the skill materially enables credential theft and unauthorized impact against external systems; referenced third-party tooling also has moderate supply-chain trust concerns.
Confidence: 86%Severity: 78%
Audit Metadata