pentester-mcp-security-tools

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally aligned with its stated purpose, but that purpose is to equip an AI agent with broad offensive security tooling and autonomous attack workflows. Main concerns are high-risk exploit capability, autonomous real-world actions, privileged local-execution guidance, and a publisher/source mismatch between ara.so branding and the third-party personal GitHub repo.

Confidence: 93%Severity: 90%
Audit Metadata
Analyzed At
Sep 19, 2026, 03:59 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fpentester-mcp-security-tools%2F@5426e934d918843b31a2ff2d3fb4178aea326eedc328bce9349d54ae38134a4d