sast-rce

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally coherent as an RCE-audit workflow and does not exfiltrate data, request credentials, or install opaque tooling. However, it gives an AI agent explicit offensive security capability to discover and help validate RCE flaws, so it carries elevated risk despite otherwise proportional local-only behavior.

Confidence: 89%Severity: 66%
Audit Metadata
Analyzed At
Sep 20, 2026, 03:35 AM
Package URL
pkg:socket/skills-sh/utkusen%2Fsast-skills%2Fsast-rce%2F@d516899145b01a902a274eb6e79ec7cd48b1e48ace2d67dd9b5d96a9e5b2ac10
Security Audit — socket — sast-rce