cicd-bot-command-injection

Fail

Audited by Socket on Sep 22, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill is an offensive exploitation playbook for AI agents: it teaches how to trigger privileged CI/CD workflows, run attacker-controlled PR code, and exfiltrate secrets to attacker infrastructure. The data theft instructions and attacker-hosted pipe-to-interpreter payload make its footprint incompatible with any benign repository analysis skill.

Confidence: 97%Severity: 98%
Audit Metadata
Analyzed At
Sep 22, 2026, 05:36 PM
Package URL
pkg:socket/skills-sh/securityfortech%2Fhacking-skills%2Fcicd-bot-command-injection%2F@e071f3f3740c515845260de2c99fd039dfcba2f019aa1c18c856e717bc41ad3c
Security Audit — socket — cicd-bot-command-injection