cracking-passwords

Fail

Audited by Socket on Mar 21, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

MALICIOUS. The skill’s stated purpose is offensive credential cracking and password-based attacks, and its actual capabilities match that harmful purpose: brute forcing services, extracting credential material, and using hashes for remote execution. While install sources are mostly normal open-source security tools, the core functionality gives an AI agent high-risk exploit capability with real-world impact and no meaningful safety boundaries.

Confidence: 96%Severity: 98%
Audit Metadata
Analyzed At
Mar 21, 2026, 01:20 AM
Package URL
pkg:socket/skills-sh/trilwu%2Fsecskills%2Fcracking-passwords%2F@88a8c08f349b28c94b0624bbb469572667fecb0b
Security Audit — socket — cracking-passwords