skills/pwnote/skills/pwnote-hackthebox/Socket

pwnote-hackthebox

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent and has no supply-chain or credential-exfiltration behavior, but it equips an AI agent for offensive security workflows against HTB targets. Risk comes from the penetration-testing use case itself, not hidden data flows or malicious install behavior.

Confidence: 93%Severity: 74%

Audit Metadata

Analyzed At

Jul 22, 2026, 01:35 PM

Package URL

pkg:socket/skills-sh/Pwnote%2Fskills%2Fpwnote-hackthebox%2F@905e0f3375d899ebf4c8910215c20dc337bbd877f42f03a53057b5b8728d5ce8