skills/reason-machines/security-skills/pentestify-security-report-generator/Socket

pentestify-security-report-generator

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly coherent for a local pentest report generator and does not show credential theft, hidden execution, or off-platform data exfiltration. However, trust is weakened because ara.so publishes the skill while installation pulls source from an unrelated personal GitHub account with unpinned dependencies and no same-org release provenance.

Confidence: 90%Severity: 52%

Audit Metadata

Analyzed At

Sep 15, 2026, 09:49 PM

Package URL

pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fpentestify-security-report-generator%2F@6b1cdc014d65b7f248ce9eefdce6b961ba95168ad22377d810ec5f0a5e11fc8b