pentest-ai-killer-automation

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s capabilities align with its stated purpose, but that purpose is to give an AI agent broad offensive security and exploitation abilities. Combined with autonomous MCP triggering, arbitrary custom command support, and moderate install-trust concerns from a third-party repo/publisher mismatch, this is a high-risk AI agent skill even without clear evidence of credential theft or covert exfiltration.

Confidence: 94%Severity: 93%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:07 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fpentest-ai-killer-automation%2F@ca5d3ab8c63c25429214d291500c74da06e32f18bc53b38040e58bcc9fc5bfc5