codex-redteam-mode

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. It is not confirmed malware, but it is an AI-agent offensive security skill whose core purpose is to enable red-team, exploitation, payload, and evasion workflows. Install trust is weakened by publisher/source mismatch and a stale PowerShell bypass path, while the broader config injection footprint exceeds a minimal prompt-only skill. The secret finding is benign documentation, but the overall skill remains high risk because the offensive capability itself is disproportionate and can facilitate harmful real-world actions.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Sep 16, 2026, 04:00 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Fcodex-skills%2Fcodex-redteam-mode%2F@3b025323c1f6ac5a047092d4d9094756f5f9c3df8b2239aca35663b1f1489ad5