aig-scanner
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is largely coherent with its stated purpose and references a legitimate Tencent A.I.G backend, but it enables active security scanning and jailbreak testing against user-specified targets including localhost/private networks, and it may upload local files and credentials to whatever A.I.G server is configured in `AIG_BASE_URL`. The main concern is high-impact scanner capability plus trust in a user-defined backend and an unverified local wrapper script, not clear malware or deceptive exfiltration.
Confidence: 88%Severity: 72%
Audit Metadata