enumerating-network-services

Fail

Audited by Socket on Sep 21, 2026

2 alerts found:

SecurityMalware
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent, but its purpose is to equip an AI agent with offensive network exploitation techniques, including brute forcing, remote command execution, file reads/writes, and persistence-adjacent SSH key abuse. There is no strong evidence of credential harvesting, covert exfiltration, or malicious installer supply chain behavior, so this is not confirmed malware; however, it is a high-risk offensive capability skill.

Confidence: 92%Severity: 88%
MalwareHIGH
references/database-services.md

This fragment is an offensive database exploitation reference. It contains explicit credential and data-dumping commands, host file access, operating-system command execution, webshell creation, and antivirus-signature evasion. Although it is documentation rather than self-executing package code, its intended use and included techniques present a high security risk and strong evidence of malicious or unauthorized attack capability.

Confidence: 99%Severity: 98%
Audit Metadata
Analyzed At
Sep 21, 2026, 11:02 AM
Package URL
pkg:socket/skills-sh/trilwu%2Fsecskills%2Fenumerating-network-services%2F@19caac51ea9366ddf5d08151e0b209ca8d27fa0b7a6e761606cb46bec7712304