linux-privilege-escalation

Warn

Audited by Socket on Nov 4, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

High-risk offensive security skill: it provides actionable procedures to escalate privileges, access password hashes, establish reverse shells, and persist. Authorization safeguards are present, and there is no clear evidence of credential exfiltration or confirmed malware; install and script provenance remain incompletely verified.

Confidence: 94%Severity: 78%
SecurityMEDIUM
references/detailed-guide.md

The visible fragment is an offensive Linux privilege-escalation and post-exploitation guide, with examples for root-shell execution, shadow-file password cracking, persistence through cron or PATH manipulation, and reverse shells to placeholder `ATTACKER_IP` addresses on port 4444. These commands could cause severe harm if executed without authorization, but the fragment itself is documentation and shows no automatic execution, hardcoded destination, or package behavior proving malware. Severity is high for unauthorized use; malware intent in the visible code is not established.

Confidence: 96%Severity: 78%
Audit Metadata
Analyzed At
Nov 4, 2026, 08:05 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Flinux-privilege-escalation%2F@fd0e29913bd963301619292d21363ce90b7898dc5e16a83a2d29a0fdc551b1bc