owasp-top-10-testing

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally aligned with its stated purpose, but that purpose is to give an AI agent offensive security capabilities and route test credentials and scan activity through an external CLI/platform. Install provenance looks same-org and not overtly malicious, yet the autonomous exploit behavior, credential forwarding, and transitive skill expansion make this a high-risk security skill.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
Aug 20, 2026, 11:38 PM
Package URL
pkg:socket/skills-sh/usestrix%2Fstrix%2Fowasp-top-10-testing%2F@8d66003cf236069da8c95a1c58c5f142c60dd004208dab009a114ccaa1320fa3
Security Audit — socket — owasp-top-10-testing