openvas

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is internally consistent and uses official Greenbone-style tooling, but it equips an AI agent with real vulnerability-scanning capability against network targets. That makes it high security risk as an offensive security skill, though there is no strong evidence of malware, credential harvesting, or deceptive data exfiltration.

Confidence: 92%Severity: 74%
Audit Metadata
Analyzed At
Sep 3, 2026, 02:39 AM
Package URL
pkg:socket/skills-sh/timsonner%2Fagent-skills%2Fopenvas%2F@00045c38252b185b06795cb065a5c996d02ef4e1858c346d7d164e2762ef85b4