websecurityacademy-solutions

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. The content is coherent as an offensive security training guide, but it materially equips an AI agent with exploit techniques, prompt-injection/system-prompt extraction patterns, and exfiltration workflows. The install source is only moderately trusted because the repo owner differs from the stated publisher and the clone is unpinned, though there is no confirmed malware behavior in the skill itself.

Confidence: 93%Severity: 81%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fwebsecurityacademy-solutions%2F@1bac0f2f86c4a7d73ff36db430c8a8bc7f26584bb34b39cf73a9c8bfe564ff8c