hunt-host-header

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent as a red-team Host-header hunting guide, with no major supply-chain deception, but it gives an AI agent explicit offensive exploitation capability and routes sensitive target data to Burp Collaborator/attacker-controlled hosts. High security risk comes from exploit enablement and exfiltration-oriented data flows, not from malware-like concealment or deceptive installation.

Confidence: 92%Severity: 89%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:50 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fhunt-host-header%2F@927b8004be1fb03b610bc68d57ac2f5d67a414c97d8ba445bda3bd24f61b35ea
Security Audit — socket — hunt-host-header