hunt-springboot

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated purpose as a Spring Boot vulnerability-hunting guide, so it does not look deceptive or malware-like. However, it is a high-risk offensive security skill: it instructs exploitation, credential discovery, heap-dump analysis, and OOB callbacks to third-party collaborator hosts, which can cause real-world impact and data exfiltration if used outside tightly authorized scope.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Oct 26, 2026, 08:25 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fhunt-springboot%2F@cd97e480bd7135d4391ff8b8df0cd293a7f1ca9f6c1e0c105aaeceeec42d83ce