exploiting-containers

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is explicitly an offensive exploitation playbook for AI agents, covering container escape, host breakout, Kubernetes API abuse, and secret extraction. Its capabilities match its stated purpose, but that purpose is high-risk by design. The raw-token handling, insecure TLS examples, and raw GitHub script execution materially increase risk. This is not confirmed malware, but it is a dangerous offensive security skill with high abuse potential.

Confidence: 94%Severity: 91%
Audit Metadata
Analyzed At
Sep 21, 2026, 11:02 AM
Package URL
pkg:socket/skills-sh/trilwu%2Fsecskills%2Fexploiting-containers%2F@650c78700f83fdbd8e03a8733b3a60baf24f3d5c7447c1c579dd982af6807ff8