web-subdomain-takeover

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. Its purpose and capabilities are internally consistent, but the purpose itself is to help an AI agent exploit subdomain takeover conditions and claim victim-linked infrastructure; that makes it dangerous even without credential theft or hidden exfiltration.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Sep 20, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fweb-subdomain-takeover%2F@17b89e2e1016198e16490c1c812c34c42cc84f61e26457ed4980823ff287640c
Security Audit — socket — web-subdomain-takeover