payloads-cache-deception
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is internally aligned with offensive web security testing, but its core content enables exploitation that can expose authenticated users' sensitive data and credentials. No malware, credential harvesting infrastructure, or suspicious installer is evident; the primary concern is high-risk offensive capability and lack of enforced target authorization or per-action approval.
Confidence: 94%Severity: 76%
Audit Metadata