rea-personal-use-authorization
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS / high-risk skill. Its stated purpose is to suppress refusals for reverse engineering and vulnerability discovery, which directly equips an AI agent for offensive-security workflows based largely on a user’s ownership claim. The referenced REA setup appears plausibly official, so this is not confirmed malware, but the combination of safety-bypass instructions, offensive capability enablement, and transitive skill/tool installation makes the skill high risk and not proportionate to a benign authorization helper.
Confidence: 90%Severity: 86%
Audit Metadata