payloads-cve

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill has no installer, credential requirements, or evident data-exfiltration flow, and there is no indication of confirmed malware. Its core purpose nevertheless equips an AI agent to conduct active vulnerability exploitation, including remote command execution and reverse-shell testing, so it presents high security risk despite the authorization disclaimer.

Confidence: 93%Severity: 78%
Audit Metadata
Analyzed At
Oct 29, 2026, 11:53 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Fpayloads-cve%2F@3c7d26f7c466c6b9ae7a7b76e1a77291c811f68df6f871f55c98d77914b3da38