wslc-pentest-workflow

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a pentest workflow, but it grants an AI agent substantial offensive capability, remote file-transfer/exfil paths, and target-facing automation. The main trust issue is moderate supply-chain risk around the Caido binary; the dominant risk is that this skill operationalizes penetration testing and credential/target interaction in a reusable agent workflow.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Oct 11, 2026, 11:56 AM
Package URL
pkg:socket/skills-sh/timsonner%2Fagent-skills%2Fwslc-pentest-workflow%2F@b6a7756ed5c47e2b6e089a3720dbfa2def0bf2e1429b98e66fac6ad8e24f094f