phpinfo-to-rce

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is an offensive exploit chain, not a benign recon helper. Its actual footprint includes webshell creation, command execution, remote file access, and reverse shell instructions, which are fundamentally high-risk and disproportionate to a 'recon' classification even though there is little classic supply-chain concern.

Confidence: 93%Severity: 96%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:49 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fphpinfo-to-rce%2F@d465d3e388d04b88d1f0f1e0af89df849d4a9a78c221b1f05a88576ab169ec03
Security Audit — socket — phpinfo-to-rce