ethical-redteam-bugbounty

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/install.sh

This installer script is a legitimate-sounding setup tool for Red Team/OSINT tooling. It does not contain obvious backdoors, credential theft, obfuscation, or direct exfiltration. However, it performs risky operations: executing a remote Homebrew installer via curl|bash, eval'ing strings, running sudo package installs, cloning remote repositories and installing pip/go modules without integrity checks. Those actions constitute a non-trivial supply-chain risk — if upstream sources are compromised the system could be compromised. The script should only be run in trusted, controlled environments and after auditing/verifying the remote resources it fetches.

Confidence: 90%Severity: 60%
Audit Metadata
Analyzed At
Apr 9, 2026, 12:13 AM
Package URL
pkg:socket/skills-sh/prof-ramos%2Fethical-redteam-skill%2Fethical-redteam-bugbounty%2F@5bf6b58c47900c4acb1f72adaf65abfbd5b0c6ac