skills/philo-groves/codex-attack/exploit-chain-analysis/Socket

exploit-chain-analysis

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill is internally consistent and not overtly malicious, but it grants an AI agent offensive exploit-chain planning capability and participates in a transitive GitHub/skills-manager trust chain without strong release verification. No credential harvesting, covert behavior, or off-platform exfiltration is evident from the provided evidence.

Confidence: 88%Severity: 72%

Audit Metadata

Analyzed At

Sep 25, 2026, 11:20 PM

Package URL

pkg:socket/skills-sh/philo-groves%2Fcodex-attack%2Fexploit-chain-analysis%2F@3171c505743298b312b513b34a5da71b92d4fd712f1185e2f90381c3affcfd85