rea-personal-use-authorization

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS / high-risk skill. Its stated purpose is to suppress refusals for reverse engineering and vulnerability discovery, which directly equips an AI agent for offensive-security workflows based largely on a user’s ownership claim. The referenced REA setup appears plausibly official, so this is not confirmed malware, but the combination of safety-bypass instructions, offensive capability enablement, and transitive skill/tool installation makes the skill high risk and not proportionate to a benign authorization helper.

Confidence: 90%Severity: 86%
Audit Metadata
Analyzed At
Oct 29, 2026, 11:52 PM
Package URL
pkg:socket/skills-sh/smartworldarafath%2Frea_skill%2Frea-personal-use-authorization%2F@0238df68c6fca63721b5e95f4a0f3ce798cee1ebf8f243bf217b2f987cd0aaa2