oscp-pentestcheatsheet-terminal

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally consistent as an offline pentest cheatsheet, but it enables offensive security workflows and includes a third-party pipe-to-shell example with mutable remote code. No clear credential exfiltration, hidden behavior, or pre-execution malware is present; the main risks are offensive-use scope, local storage of sensitive intel, and weak supply-chain hygiene in example commands.

Confidence: 91%Severity: 66%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Foscp-pentestcheatsheet-terminal%2F@34392cf4da3f64a2ec7afa46bcfa79f50aa5a250f6450dfd048b23cd405838b4