hunt-cicd

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its capabilities align with its stated red-team purpose, but that purpose is to exploit CI/CD systems, steal secrets, and exfiltrate data to attacker-controlled endpoints. Official tools are mixed with third-party extension installs, and the overall footprint is far beyond safe developer assistance.

Confidence: 94%Severity: 92%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:51 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fhunt-cicd%2F@f46a1b8f773e91ae061d79a584b7f3bff2a2c29d5882feb2abf28c8e82ebe47c
Security Audit — socket — hunt-cicd