payloads-cache-deception

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally aligned with offensive web security testing, but its core content enables exploitation that can expose authenticated users' sensitive data and credentials. No malware, credential harvesting infrastructure, or suspicious installer is evident; the primary concern is high-risk offensive capability and lack of enforced target authorization or per-action approval.

Confidence: 94%Severity: 76%
Audit Metadata
Analyzed At
Oct 29, 2026, 11:51 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Fpayloads-cache-deception%2F@4078d144933c6af10ca47a07871e45920b53ae8570c9874ee595e02e6c5a2f3f