model-extraction

Warn

Audited by Socket on Oct 16, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent, but its purpose is to equip an AI agent with offensive model-theft capabilities and evasion tactics. There is little supply-chain or credential risk, yet the operational impact is high because it automates exploit-style extraction against external AI services.

Confidence: 95%Severity: 86%
SecurityMEDIUM
assets/extraction-config.yaml

This YAML configuration describes model extraction and includes explicit measures to evade query monitoring and rate limits. It contains no executable behavior or direct malware indicators, but presents a significant misuse risk if applied to a model without authorization. No domains, URLs, IP addresses, file paths, or credentials are present.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Oct 16, 2026, 09:57 AM
Package URL
pkg:socket/skills-sh/pluginagentmarketplace%2Fcustom-plugin-ai-red-teaming%2Fmodel-extraction%2F@e226479a58c27fac61e176c75543c43433712f0924710bf96f63c0547e664043