hunt-dispatch

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk but not confirmed malware. The skill is internally consistent as a red-team/WAPT dispatcher, but it gives an AI agent offensive security capability, uses target-derived content to choose actions, and loads many additional skills through an unverified transitive trust path. No clear credential exfiltration or malicious installer behavior is present.

Confidence: 90%Severity: 81%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:51 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fhunt-dispatch%2F@e1f6eae485e48b48033c7acab83468957e6801aea36d110ab2a8180d237f7805
Security Audit — socket — hunt-dispatch