payloads-java-rmi

Warn

Audited by Socket on Nov 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill's stated penetration-testing purpose matches its RMI/JMX exploitation content, but it provides actionable remote-code-execution and credential-brute-force instructions. Treat it as high risk and use only in explicitly authorized, isolated testing; avoid real credentials in command-line arguments.

Confidence: 96%Severity: 82%
Audit Metadata
Analyzed At
Nov 3, 2026, 03:47 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Fpayloads-java-rmi%2F@22c27f5d234bf8623e54b6901049a6863eb7afe9dc35ebdecc06a08fc9469bcb