skills/timsonner/agent-skills/wpscan/Socket

wpscan

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally coherent for WordPress pentesting and uses an official tool ecosystem, but it equips an AI agent with offensive scanning and credential-spraying capability against live targets. Main risks are agent-enabled security testing, optional TLS-check disabling, and handling of tokens/password lists rather than malware or covert exfiltration.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Sep 3, 2026, 02:39 AM

Package URL

pkg:socket/skills-sh/timsonner%2Fagent-skills%2Fwpscan%2F@da47427a044972e611de38ebdac33a5ad75a1eb8e45a6aa8edd1d96d57388df8