kube-hunter

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent and uses a legitimate upstream tool for its stated Kubernetes pentest purpose, but that purpose is itself an offensive security capability for an AI agent. No clear credential theft or deceptive routing appears in the skill text, yet active/in-cluster scanning and optional token use make it high security risk overall.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Sep 3, 2026, 02:39 AM
Package URL
pkg:socket/skills-sh/timsonner%2Fagent-skills%2Fkube-hunter%2F@143f840fe04853f5672f8dc8014492834bc52b3a3627ed8c8f1a95b44a92c86a