hunt-xxe

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. It is internally consistent with its stated red-team purpose, but that purpose is to equip an AI agent with offensive XXE exploitation workflows, including OOB exfiltration, SSRF, file theft, and possible RCE chaining against arbitrary targets. Low supply-chain concern, but very high operational security risk.

Confidence: 96%Severity: 94%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:52 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fhunt-xxe%2F@02ddab973c98d89e78402ffee537e42f79dde0d41163ac47add9c7f5de9e3ea6
Security Audit — socket — hunt-xxe