hunt-xxe
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS/HIGH-RISK skill. It is internally consistent with its stated red-team purpose, but that purpose is to equip an AI agent with offensive XXE exploitation workflows, including OOB exfiltration, SSRF, file theft, and possible RCE chaining against arbitrary targets. Low supply-chain concern, but very high operational security risk.
Confidence: 96%Severity: 94%
Audit Metadata