hunt-file-upload

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent as a file-upload bug-hunting guide, but it equips an AI agent with offensive exploitation workflows, exfiltration-capable payloads, and attack chains beyond simple defensive analysis. The documentation-only format and explicit authorization gate reduce malware confidence, yet the autonomous offensive utility keeps overall security risk high.

Confidence: 92%Severity: 81%
Audit Metadata
Analyzed At
Oct 26, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fhunt-file-upload%2F@83a35d1ef44d6d4deecaacab227e30dbb6e25be8f36ee03a389579e2bbe12621