sccm-takeover-relay

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. The install sources are partly verifiable and mostly consistent with the stated tooling, so this is not confirmed malware, but the skill is fundamentally an offensive security workflow for AI agents: it directs coercion, NTLM relay, database-side RBAC modification, remote SSH execution, and privilege escalation in live environments. That footprint is coherent with its purpose yet still dangerous, making it a high-security-risk exploit skill rather than a benign admin/integration skill.

Confidence: 93%Severity: 88%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:19 PM
Package URL
pkg:socket/skills-sh/specterops%2Fskills%2Fsccm-takeover-relay%2F@6e56b0bc8f0b788627b823ed7aa2b5e6154b41b6aa5c33abb5585cee71194d1b