skills/pwnote/skills/pwnote-bug-bounty/Socket

pwnote-bug-bounty

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent and not a credential-harvesting or supply-chain lure, but it is an offensive-security skill that helps an AI agent conduct bug bounty recon and reporting against real targets. Risk is driven by security-tooling capability, not hidden installs or exfiltration.

Confidence: 90%Severity: 78%

Audit Metadata

Analyzed At

Jul 22, 2026, 01:35 PM

Package URL

pkg:socket/skills-sh/Pwnote%2Fskills%2Fpwnote-bug-bounty%2F@9483f0b5fb09be5f6a78c5a9fb45aba44001eb2a3cd2a05eb71dcb51bc24c580