hunt-nosqli
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive exploitation, and its actual footprint matches that purpose: it guides auth bypass, data exfiltration, SSRF-to-Redis abuse, and possible RCE/webshell chains. The unpinned third-party `nosqlmap` install adds supply-chain risk, but the larger concern is that this skill gives an AI agent active penetration and exfiltration capability against arbitrary targets.
Confidence: 93%Severity: 90%
Audit Metadata