offensive-iot

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s footprint is internally consistent with its stated purpose, but that purpose is offensive IoT/ICS exploitation. There is little supply-chain concern, yet the skill grants high-risk attack guidance, disabled-security interception, credential extraction, and real-world device-control actions, making it unsuitable as a low-risk general agent skill.

Confidence: 95%Severity: 93%
Audit Metadata
Analyzed At
Sep 15, 2026, 01:33 PM
Package URL
pkg:socket/skills-sh/snailsploit%2Fclaude-red%2Foffensive-iot%2F@4ad4fbda150cc995379768615474ff8590e36d031eb5cd2218e36258eeeeb766
Security Audit — socket — offensive-iot