drm-pentesting-toolkit

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s footprint is high risk and only partially coherent with its stated DRM testing purpose: it handles credential files and DRM device secrets, retrieves decryption keys, and executes manually downloaded third-party binaries to download/decrypt content. The biggest concerns are broad secret exposure to plugins, outbound posting to arbitrary license endpoints, and execution of unverified external tools without integrity checks.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:08 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fdrm-pentesting-toolkit%2F@2b5e97bc93b5aabf5f8beba5881ad49de65f468c3b13abe643fb056b6cd8c4f0