pwnote-offsec-web300

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent and not overtly malicious, but it is an offensive-security skill that equips an AI agent to review code for vulnerabilities and build exploit-chain PoCs. No credential harvesting or malicious install behavior is shown; risk is driven mainly by offensive capability and a minor unverifiable tooling reference.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Jul 22, 2026, 01:35 PM
Package URL
pkg:socket/skills-sh/Pwnote%2Fskills%2Fpwnote-offsec-web300%2F@809e0992de8b85533249fd8e7c6636829889af067ff916407e0bd68cf54b350d
Security Audit — socket — pwnote-offsec-web300