skills/smartworldarafath/rea_skill/offensive-toctou/Socket

offensive-toctou

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill specifies no apparent credential harvesting, exfiltration, or download-execute behavior. However, it gives an AI agent offensive vulnerability-assessment capabilities against privileged software, so the overall risk is high despite the stated authorization scope.

Confidence: 90%Severity: 72%

Audit Metadata

Analyzed At

Oct 29, 2026, 11:51 PM

Package URL

pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Foffensive-toctou%2F@18b99c63c265baed9fb6ebcf71723591807b1996f15f325392683f78d913f9e0