enumerating-network-services
Audited by Socket on Sep 21, 2026
2 alerts found:
SecurityMalwareSUSPICIOUS. The skill is internally consistent, but its purpose is to equip an AI agent with offensive network exploitation techniques, including brute forcing, remote command execution, file reads/writes, and persistence-adjacent SSH key abuse. There is no strong evidence of credential harvesting, covert exfiltration, or malicious installer supply chain behavior, so this is not confirmed malware; however, it is a high-risk offensive capability skill.
This fragment is an offensive database exploitation reference. It contains explicit credential and data-dumping commands, host file access, operating-system command execution, webshell creation, and antivirus-signature evasion. Although it is documentation rather than self-executing package code, its intended use and included techniques present a high security risk and strong evidence of malicious or unauthorized attack capability.