drm-pentesting-toolkit
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s footprint is high risk and only partially coherent with its stated DRM testing purpose: it handles credential files and DRM device secrets, retrieves decryption keys, and executes manually downloaded third-party binaries to download/decrypt content. The biggest concerns are broad secret exposure to plugins, outbound posting to arbitrary license endpoints, and execution of unverified external tools without integrity checks.
Confidence: 89%Severity: 84%
Audit Metadata