essential-tools

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is purpose-consistent and not overtly malicious: the command shown is a normal recon availability check, and the named tools are legitimate pentesting utilities. However, it grants an AI agent offensive security capability including scanning, enumeration, browser-driven testing, and binary analysis, which creates high operational security risk despite low evidence of malware or credential theft.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Sep 15, 2026, 08:40 AM
Package URL
pkg:socket/skills-sh/transilienceai%2Fcommunitytools%2Fessential-tools%2F@8ff570e2da6ca5b42061f47670d53e0d9b52395e5c4ae527d3ac0b48dbcf5b25