aig-scanner

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is largely coherent with its stated purpose and references a legitimate Tencent A.I.G backend, but it enables active security scanning and jailbreak testing against user-specified targets including localhost/private networks, and it may upload local files and credentials to whatever A.I.G server is configured in `AIG_BASE_URL`. The main concern is high-impact scanner capability plus trust in a user-defined backend and an unverified local wrapper script, not clear malware or deceptive exfiltration.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Sep 27, 2026, 08:06 PM
Package URL
pkg:socket/skills-sh/tencent%2Fai-infra-guard%2Faig-scanner%2F@f9e09486696f6bfd73a54fb10e5300ad82ec7df224322ef0c3567a16d878cb53