Broken Authentication Testing

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is coherent with its stated purpose, but that purpose is to give an AI agent offensive authentication-testing capability. There is no obvious hidden exfiltration endpoint or suspicious installer, yet the skill enables brute force, credential stuffing, MFA bypass, and session hijacking techniques with real-world impact. Classified as SUSPICIOUS due to high-risk offensive security functionality for an agent.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Oct 29, 2026, 09:45 AM
Package URL
pkg:socket/skills-sh/pacman-clyde%2Fantigravity-awesome-skills%2Fbroken-authentication-testing%2F@867a302aae29ee94b15fda154d1f34feee206b9fecf287db2ea58f6b355b5507