visa-vulnerability-agentic-harness

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally coherent and the documented install path looks same-org and benign, but its actual capability is an AI-driven security/exploit research harness. The main risk is not hidden malware behavior; it is the high-risk offensive scanning scope, external LLM data flow, optional custom gateways, and transitive agent-install behavior.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:43 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fai-agent-skills%2Fvisa-vulnerability-agentic-harness%2F@90f3ed1f354b5a24f1f63b005014d1169babc8a40534d5e024bc56b638af30b2