hunt-nosqli

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive exploitation, and its actual footprint matches that purpose: it guides auth bypass, data exfiltration, SSRF-to-Redis abuse, and possible RCE/webshell chains. The unpinned third-party `nosqlmap` install adds supply-chain risk, but the larger concern is that this skill gives an AI agent active penetration and exfiltration capability against arbitrary targets.

Confidence: 93%Severity: 90%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:52 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fhunt-nosqli%2F@82513f9527dc11677f7de74a998258029834497bacab9b57d32217bd45725d96
Security Audit — socket — hunt-nosqli