deserialization-insecure

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK: this skill is an offensive exploitation playbook for insecure deserialization, with concrete RCE payloads, callback endpoints, and exploit-tool usage across multiple ecosystems. It is not confirmed malware by itself, but it gives an AI agent high-risk offensive security capabilities and includes known exfiltration-style confirmation flows.

Confidence: 95%Severity: 94%
Audit Metadata
Analyzed At
Jul 21, 2026, 01:26 PM
Package URL
pkg:socket/skills-sh/strivepan-svg%2Fhack-skills%2Fdeserialization-insecure%2F@a3fb4dd26aa3cafeb61e723737eed103750a484e64c8cc5859716a1f59b87206
Security Audit — socket — deserialization-insecure