wp-plugin-cve-hunt

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK as an AI agent skill: it is internally consistent with a red-team purpose, but that purpose is to perform offensive vulnerability research and exploit-oriented probing against live WordPress targets. Data flows mostly stay with official services, and there is no strong evidence of credential theft or malware, but the exploit guidance, mass-target workflow, and live attack examples make the skill dangerous.

Confidence: 93%Severity: 88%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:51 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Fwp-plugin-cve-hunt%2F@f5eabd147af0656439c079865b158469d19cabaebba59c03402745e5ff9e143c
Security Audit — socket — wp-plugin-cve-hunt