owasp-top-10-testing

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally aligned with its stated purpose, but that purpose is to give an AI agent offensive security capabilities and route test credentials and scan activity through an external CLI/platform. Install provenance looks same-org and not overtly malicious, yet the autonomous exploit behavior, credential forwarding, and transitive skill expansion make this a high-risk security skill.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Sep 2, 2026, 02:07 AM
Package URL
pkg:socket/skills-sh/usestrix%2Fstrix%2Fowasp-top-10-testing%2F@1801f47c81b2307b7cb152c9f46ce2383f1650340730b26d99faa176615f8bbc
Security Audit — socket — owasp-top-10-testing