path-traversal-lfi

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its actual footprint is an AI-agent offensive exploitation manual with explicit file theft and RCE escalation guidance, plus related-skill chaining. There is little sign of credential harvesting by the publisher, so it is not confirmed malware, but it is clearly inappropriate for general agent use and materially increases attack capability.

Confidence: 94%Severity: 93%
Audit Metadata
Analyzed At
Jul 21, 2026, 01:29 PM
Package URL
pkg:socket/skills-sh/strivepan-svg%2Fhack-skills%2Fpath-traversal-lfi%2F@8a643074503da7cf7c79c05b1c797a22ff4edcf8786b1d888d7f770905611cac
Security Audit — socket — path-traversal-lfi