acidrain-security-testing

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent as an offensive web-security/testing skill, but it is inherently high-risk because it teaches exploit techniques, reads/logs cookies and request data, and even includes a cookie-exfiltration payload. The install source is also mismatched with the stated publisher and lacks strong provenance, increasing trust concerns without proving outright malware.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:08 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Facidrain-security-testing%2F@84a0a955e1cab91bb5d4b2786c6d1f00a16396f297afd4db6fcef8c2121b91bb