payloads-file-upload

Warn

Audited by Socket on Nov 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This is an exploit-focused security skill, not a passive reference: it equips an AI agent to test upload endpoints with payloads that can achieve command execution, file disclosure, and outbound connections. No evidence shows credential theft, concealed behavior, or automatic execution, so malicious intent is not confirmed; nevertheless, the offensive capability and lack of enforced per-action authorization create high security risk.

Confidence: 94%Severity: 78%
Audit Metadata
Analyzed At
Nov 3, 2026, 03:46 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Fpayloads-file-upload%2F@1baf2f20a0828c045850ffa9dc0d7428eec367a79f09cdd7ca68265f6a2008a3