web-pentest

Warn

Audited by Socket on Aug 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK but not malware. The skill is internally consistent for a pentesting purpose, yet it grants an AI agent offensive security capabilities against live targets, processes untrusted external content with execution-capable tools, and can collect sensitive evidence. Guardrails help, but the overall footprint is still high risk and suitable only for tightly controlled authorized use.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Aug 22, 2026, 03:32 AM
Package URL
pkg:socket/skills-sh/nousresearch%2Fhermes-agent%2Fweb-pentest%2F@ccb6e1f37be4d101f5d3cb128a0d759b7f73a175be16f5411afadab735465479
Security Audit — socket — web-pentest