jamboree-android-security-testing

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its capabilities, but it is a high-risk offensive-security skill that instructs an agent to install and operate rooting, interception, and runtime-hooking tooling, and its main orchestration comes from an unrelated personal GitHub repo executed via local scripts. The main concern is supply-chain trust and broad privileged testing actions, not confirmed credential theft or covert exfiltration.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fjamboree-android-security-testing%2F@fe3d240fcaada779dd7b9de9a75a0608003839d27e2af94d5020f27637989cae