payloads-xslt

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is a focused but highly actionable XSLT exploitation reference. It has no evident credential harvesting, stealth, or independent exfiltration mechanism, and no untrusted executable installation path. Its core content nevertheless provides file access, SSRF, file-writing, and command-execution payloads, creating significant security risk if used against unauthorized targets.

Confidence: 97%Severity: 76%
Audit Metadata
Analyzed At
Oct 29, 2026, 11:51 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Fpayloads-xslt%2F@7c2a18a54448011efcd3086b9a2276ad56448004bcfe1560175e752dbce74b7e