payloads-xxe

Warn

Audited by Socket on Nov 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is a comprehensive dual-use XXE exploitation guide. It contains no evident installer, credential theft from the user, or hidden execution, but it directly enables file disclosure, SSRF, out-of-band exfiltration, and denial of service; treat it as high risk and restrict use to explicitly authorized testing.

Confidence: 97%Severity: 84%
Audit Metadata
Analyzed At
Nov 2, 2026, 01:36 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Fpayloads-xxe%2F@59e3f1f454abf69daba19122e4c8b74a645eb0b68af0b3e30a5bae235644183a