payloads-ssi

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is a penetration-testing reference whose payloads are coherent with its stated SSI-injection purpose, but it provides substantial offensive capabilities, including potential RCE and cookie theft. No autonomous execution, installation, or skill-controlled exfiltration is shown. Use only for explicitly authorized testing; overall security risk is elevated due to the exploit functionality.

Confidence: 96%Severity: 72%
Audit Metadata
Analyzed At
Oct 29, 2026, 11:52 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Fpayloads-ssi%2F@ceaf3a6d5e992f23c88e744617650960faebbe9b04b106663868ef9d068d4566