escalating-linux-privileges

Warn

Audited by Socket on Sep 21, 2026

3 alerts found:

Securityx2Anomaly
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive privilege-escalation capability on Linux hosts. The main risks are explicit credential/secret access and download-execute of external tooling; this is a high-risk offensive security skill rather than confirmed malware.

Confidence: 92%Severity: 88%
SecurityMEDIUM
references/kernel-and-nfs.md

This is offensive privilege-escalation documentation, not normal package source code. It contains explicit kernel exploit execution and NFS no_root_squash root-shell instructions. The text itself does not show embedded malware or obfuscation, but misuse can compromise systems and should be restricted to authorized testing with explicit approval.

Confidence: 99%Severity: 95%
AnomalyLOW
references/suid-sgid-and-capabilities.md

The fragment is privilege-escalation documentation with actionable commands that could be used for authorized local security testing or unauthorized system compromise. It contains no automatically executing malicious code or evidence of supply-chain malware. Its operational misuse potential is significant, but the supplied file alone does not perform any actions.

Confidence: 99%Severity: 58%
Audit Metadata
Analyzed At
Sep 21, 2026, 11:02 AM
Package URL
pkg:socket/skills-sh/trilwu%2Fsecskills%2Fescalating-linux-privileges%2F@2b08e2bd05277273af5d19f8c95cdd5bfe2f37479fb029d44e532c4086c9455a