essential-tools
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is purpose-consistent and not overtly malicious: the command shown is a normal recon availability check, and the named tools are legitimate pentesting utilities. However, it grants an AI agent offensive security capability including scanning, enumeration, browser-driven testing, and binary analysis, which creates high operational security risk despite low evidence of malware or credential theft.
Confidence: 91%Severity: 78%
Audit Metadata