cmdi-command-injection

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is to help perform command-injection attacks, and its actual footprint is fully aligned with offensive exploitation: payload libraries, exfiltration, reverse shells, and exploit chaining. It is not covert malware by itself, but it materially equips an AI agent to execute harmful security attacks and data theft.

Confidence: 96%Severity: 92%
Audit Metadata
Analyzed At
Jul 21, 2026, 01:26 PM
Package URL
pkg:socket/skills-sh/strivepan-svg%2Fhack-skills%2Fcmdi-command-injection%2F@7f6d46917b5c7657b0049f366eabaf4cad629d7b88aff28470602884e7819bf4
Security Audit — socket — cmdi-command-injection