hunt-http-smuggling

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill: its capabilities match its stated redteam purpose, but that purpose is to perform offensive HTTP request smuggling research and exploit validation against targets. No clear credential harvesting or stealth behavior is present, and installer sources look like recognizable security tooling, but the skill still meaningfully increases risk by enabling active exploitation workflows and by disabling TLS verification in bundled code.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:53 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fhunt-http-smuggling%2F@a79cefe3856272adb65913acedddef69dec8e1e127b36191e3a66dd9372f0f7d
Security Audit — socket — hunt-http-smuggling