hunt-ssti

Warn

Audited by Socket on Oct 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: this is a docs-only offensive security skill that teaches an AI agent how to fingerprint and exploit SSTI up to RCE. The text includes some safety gates and no installer, code, credential collection, or exfiltration path, so it is not confirmed malware; but its actual capability is clearly exploit-oriented and therefore high-risk for agent use.

Confidence: 94%Severity: 76%
Audit Metadata
Analyzed At
Oct 27, 2026, 01:59 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fhunt-ssti%2F@f95bba5bc2287444009cae73bf1c23508e6a1e12205b5817e259546991891c6b