web-websocket

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent, and the skill does not include suspicious installers, credential harvesting, or third-party data routing. However, it is an offensive security skill that equips an AI agent to probe and exploit WebSocket vulnerabilities, including cross-site hijacking and unauthorized actions, so it carries high operational security risk even without clear malware indicators.

Confidence: 93%Severity: 82%
Audit Metadata
Analyzed At
Sep 20, 2026, 11:03 PM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fweb-websocket%2F@354043217df8a238bd73f316c898d1f1144724b7706cae9aac460346faf7f4ca
Security Audit — socket — web-websocket