pentest-validation

Warn

Audited by Socket on Oct 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned for pentest validation, and its offensive actions are openly disclosed rather than hidden, but it still equips an AI agent to perform exploit validation with real-world impact. No malicious installer, covert exfiltration endpoint, or deceptive credential routing is evident in this artifact; the main concern is high-risk offensive capability even with authorization and non-production safeguards.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Oct 6, 2026, 12:13 PM
Package URL
pkg:socket/skills-sh/proffesor-for-testing%2Fagentic-qe%2Fpentest-validation%2F@cff43bf50cb49ab1f205b4badd3b7c39828ebd056531884797c554397e64354c