pentest-skills-framework

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent as an offensive security framework, but that stated purpose itself gives an AI agent high-risk penetration-testing and exploitation capabilities against arbitrary targets. Install sources appear broadly legitimate and there is no clear credential-harvesting or covert exfiltration, yet the autonomous offensive network actions make this a high-risk skill inappropriate for general agent use.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fpentest-skills-framework%2F@bf52390e10d7ce1269a9ba4b276185a138d36c8a70a04f39326c9f0794f37485