m365-entra-attack

Fail

Audited by Socket on Jul 31, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

High-risk offensive red-team skill. Its capabilities align with its stated purpose, but that purpose is to enable live credential attacks and bypass exploration against Microsoft 365/Entra targets. Not confirmed malware, but it is dangerous by design for an AI agent and includes unsafe TLS-disabled examples plus some broad external-tool installation guidance.

Confidence: 94%Severity: 95%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:52 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fm365-entra-attack%2F@b9e5ca5265ed52570bea1d8e542f03716c0c83b806de944ee8c10fa564c1ced8
Security Audit — socket — m365-entra-attack