csp-bypass-advanced

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent and contains no installer or credential-forwarding behavior, but its entire purpose is offensive: bypassing CSP and enabling data exfiltration from target applications. This makes it a high-risk exploit skill for AI-agent use, though not confirmed malware.

Confidence: 93%Severity: 89%
Audit Metadata
Analyzed At
Jul 21, 2026, 01:25 PM
Package URL
pkg:socket/skills-sh/strivepan-svg%2Fhack-skills%2Fcsp-bypass-advanced%2F@a113d25de45bf6e707a3e0a4561a1ab7020c0f76be108d7b20616327bef89135
Security Audit — socket — csp-bypass-advanced